Customize Profile Button

[ViNsTeR777]

Hey guys what's happened with being able to customize our profiles, i can still see the team option but no longer the user

[I.nfraR.ed]

Yes, seems to be gone, but I can't really tell if something is still applied, since the site uses the custom styles from my profile

Some of the styles are a little off, due to some upgrades during the years though.

The logo I had is gone.

PS: Actually the custom css is still applied, the background on my profile page uses black/grey shade rather than the default blue of the rest of the pages.

Edited May 17, 2021 by I.nfraR.ed

[Leeghoofd]

Maybe you experienced some downtime last week, this was partly related to the CSS and some crafty user.

Even though the programmer has fixed/tweaked some stuff, we opted to remove the feature to avoid what has happened last week

[I.nfraR.ed]

Haha, so I now know what he tried to do, either by mistake, or intentionally exploiting css injection vulnerabilities

In fact I wanted to test it and report if something is wrong, but never actually got to it. Custom CSS without sanitizing it can be dangerous.

PS: I think it is possible to steal someones account using that kind of XSS attack, but haven't drilled much in the topic.

So..a good call, I would say.

Edited May 19, 2021 by I.nfraR.ed

[cbjaust]

How are achievements going to be selected for display now? 

[I.nfraR.ed]

Good question.

IMO, any customization needs to be controlled with the appropriate interface for that.

I guess that feature will be back at some point, but not the free form css input.

If a "theme" customization is needed, then some sort of a theme editor has to be implemented.

Edited May 20, 2021 by I.nfraR.ed

[klopcha]

I can change photo profile? I add my photo just now, i can't change it now?

[Leeghoofd]

Is that a question or what do you mean Klopcha? Standard profile options are still acessible like changing your profile picture, CSS not

[klopcha]

On 5/23/2021 at 12:29 PM, Leeghoofd said:

Is that a question or what do you mean Klopcha? Standard profile options are still acessible like changing your profile picture, CSS not

Problem solved. I found new settings.