skorotkiewicz/rDrama
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

disallow url()

Browse source
This commit is contained in:
justcool393 2023-02-25 15:51:30 -06:00 • committed by Ben Rog-Wilhelm
parent 71406da834
commit e61e35226d
3 changed files with 16 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

2
files/helpers/sanitize.py
View file

@ -13,6 +13,7 @@ from random import random, choice
import gevent
import time
import requests
from files.helpers.regex import *
from files.__main__ import app
TLDS = ('ac','ad','ae','aero','af','ag','ai','al','am','an','ao','aq','ar',
@ -378,4 +379,5 @@ def validate_css(css:str) -> tuple[bool, str]:
'''
if '</style' in css.lower(): return False, "Invalid CSS"
if '@import' in css.lower(): return False, "@import statements are not allowed"
if css_url_regex.search(css): return False, "External URL imports are not allowed"
return True, ""