mirror of
https://github.com/BookStackApp/BookStack.git
synced 2024-10-30 07:32:39 +01:00
Prevented custom HTML being inserted on settings page
Gives option for fixing if badly formatted HTML is inserted. Closes #310
This commit is contained in:
parent
387047f262
commit
af3c0e43a5
@ -23,9 +23,10 @@
|
|||||||
|
|
||||||
@include('partials/custom-styles')
|
@include('partials/custom-styles')
|
||||||
|
|
||||||
<!-- Custom user content -->
|
@if(setting('app-custom-head') && \Route::currentRouteName() !== 'settings')
|
||||||
@if(setting('app-custom-head'))
|
<!-- Custom user content -->
|
||||||
{!! setting('app-custom-head') !!}
|
{!! setting('app-custom-head') !!}
|
||||||
|
<!-- End custom user content -->
|
||||||
@endif
|
@endif
|
||||||
</head>
|
</head>
|
||||||
<body class="@yield('body-class')" ng-app="bookStack">
|
<body class="@yield('body-class')" ng-app="bookStack">
|
||||||
|
@ -129,7 +129,7 @@ Route::group(['middleware' => 'auth'], function () {
|
|||||||
|
|
||||||
// Settings
|
// Settings
|
||||||
Route::group(['prefix' => 'settings'], function() {
|
Route::group(['prefix' => 'settings'], function() {
|
||||||
Route::get('/', 'SettingController@index');
|
Route::get('/', 'SettingController@index')->name('settings');
|
||||||
Route::post('/', 'SettingController@update');
|
Route::post('/', 'SettingController@update');
|
||||||
|
|
||||||
// Users
|
// Users
|
||||||
|
Loading…
Reference in New Issue
Block a user