Use recursive stylesheet sanitation

62a1919402faa555c3d670d517fa8872be60a898

Cohee <18619528+Cohee1207@users.noreply.github.com>

public/scripts/chats.js+22 -12 Viewed

     const styleDecodeRegex = /<custom-style>(.+?)<\/custom-style>/gms;
     const mediaAllowed = isExternalMediaAllowed();
 -    return text.replaceAll(styleDecodeRegex, (_, style) => {
 +    function sanitizeRule(rule) {
 -        try {
 -            let styleCleaned = unescape(style).replaceAll(/<br\/>/g, '');
 -            const ast = css.parse(styleCleaned);
 -            const rules = ast?.stylesheet?.rules;
 -            if (rules) {
 -                for (const rule of rules) {
 -                    if (rule.type === 'import') {
 -                        rules.splice(rules.indexOf(rule), 1);
 -                    }
+-
 -                    if (rule.type === 'rule') {
         if (rule.selectors) {
             for (let i = 0; i < rule.selectors.length; i++) {
                 let selector = rule.selectors[i];

+            }
+        }
+    }
++
 +    function sanitizeRuleSet(ruleSet) {
 +        if (ruleSet.type === 'rule') {
 +            sanitizeRule(ruleSet);
+        }
++
 +        if (Array.isArray(ruleSet.rules)) {
 +            ruleSet.rules = ruleSet.rules.filter(rule => rule.type !== 'import');
++
 +            for (const mediaRule of ruleSet.rules) {
 +                sanitizeRuleSet(mediaRule);
 +            }
 +        }
 +    }
++
 +    return text.replaceAll(styleDecodeRegex, (_, style) => {
 +        try {
 +            let styleCleaned = unescape(style).replaceAll(/<br\/>/g, '');
 +            const ast = css.parse(styleCleaned);
 +            const sheet = ast?.stylesheet;
 +            if (sheet) {
 +                sanitizeRuleSet(ast.stylesheet);
+            }
             return `<style>${css.stringify(ast)}</style>`;
         } catch (error) {