Prevented custom HTML being inserted on settings page

Gives option for fixing if badly formatted HTML is inserted.
Closes #310
This commit is contained in:
Dan Brown 2017-02-25 12:41:32 +00:00
parent 387047f262
commit af3c0e43a5
No known key found for this signature in database
GPG Key ID: 46D9F943C24A2EF9
2 changed files with 4 additions and 3 deletions

View File

@ -23,9 +23,10 @@
@include('partials/custom-styles')
<!-- Custom user content -->
@if(setting('app-custom-head'))
@if(setting('app-custom-head') && \Route::currentRouteName() !== 'settings')
<!-- Custom user content -->
{!! setting('app-custom-head') !!}
<!-- End custom user content -->
@endif
</head>
<body class="@yield('body-class')" ng-app="bookStack">

View File

@ -129,7 +129,7 @@ Route::group(['middleware' => 'auth'], function () {
// Settings
Route::group(['prefix' => 'settings'], function() {
Route::get('/', 'SettingController@index');
Route::get('/', 'SettingController@index')->name('settings');
Route::post('/', 'SettingController@update');
// Users