From bc84259f80bff0f2bede1afd03912ab4b0737208 Mon Sep 17 00:00:00 2001
From: maaa <stigmas-offers0n@icloud.com>
Date: Mon, 29 Apr 2024 23:39:28 +0200
Subject: [PATCH] fix "xss"

---
 main | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/main b/main
index 15521d5..09a4c76 100644
--- a/main
+++ b/main
@@ -252,7 +252,7 @@ async def apipageuser(userid):
     <!DOCTYPE html><script>
     window.stop()
     </script>
-    <base target="_blank"/> <head><meta http-equiv="Content-Security-Policy" default-src='none'; content="img-src cdn.discordapp.com cdn.discordapp.net media.tenor.com; media-src: fonts.gstatic.com fonts.googleapis.com; style-src: 'self';" /></head>"""
+    <base target="_blank"/> <head><meta http-equiv="Content-Security-Policy" default-src='none'; content="img-src cdn.discordapp.com cdn.discordapp.net media.tenor.com; media-src: fonts.gstatic.com fonts.googleapis.com; style-src: 'none';" /></head>"""
 
     if not pageuser == "error":
         return addhtml + pageuser["htmldescription"]
