summaryrefslogtreecommitdiff
path: root/docs/configuration
diff options
context:
space:
mode:
authorLibravatar tobi <31960611+tsmethurst@users.noreply.github.com>2022-09-12 13:14:29 +0200
committerLibravatar GitHub <noreply@github.com>2022-09-12 13:14:29 +0200
commitb42469e4e06d82a0e458b94379e226257ba3ca6c (patch)
treef4df0740ff0378dd4d3691cac4e942ea0a22eb5a /docs/configuration
parent[feature] Fetch + display custom emoji in statuses from remote instances (#807) (diff)
downloadgotosocial-b42469e4e06d82a0e458b94379e226257ba3ca6c.tar.xz
[feature] Allow users to set custom css for their profiles + threads (#808)
* add custom css account property + db func to fetch * allow account to get/set custom css * serve custom css for an account * go fmt * use monospace for customcss, add link * add custom css to account cache * fix broken field * add custom css docs to user guide * add `accounts-allow-custom-css` config flag * add allow custom css to /api/v1/instance response * only show/set custom css if allowed to do so * only set/serve custom account css if enabled * update swagger docs * chain promise * make bool a bit clearer * use cache for GetAccountCustomCSSByUsername
Diffstat (limited to 'docs/configuration')
-rw-r--r--docs/configuration/accounts.md16
1 files changed, 16 insertions, 0 deletions
diff --git a/docs/configuration/accounts.md b/docs/configuration/accounts.md
index edb647a1b..3f0c6d5f8 100644
--- a/docs/configuration/accounts.md
+++ b/docs/configuration/accounts.md
@@ -23,4 +23,20 @@ accounts-approval-required: true
# Options: [true, false]
# Default: true
accounts-reason-required: true
+
+# Bool. Allow accounts on this instance to set custom CSS for their profile pages and statuses.
+# Enabling this setting will allow accounts to upload custom CSS via the /user settings page,
+# which will then be rendered on the web view of the account's profile and statuses.
+#
+# For instances with public sign ups, it is **HIGHLY RECOMMENDED** to leave this setting on 'false',
+# since setting it to true allows malicious accounts to make their profile pages misleading, unusable
+# or even dangerous to visitors. In other words, you should only enable this setting if you trust
+# the users on your instance not to produce harmful CSS.
+#
+# Regardless of what this value is set to, any uploaded CSS will not be federated to other instances,
+# it will only be shown on profiles and statuses on *this* instance.
+#
+# Options: [true, false]
+# Default: false
+accounts-allow-custom-css: false
```