…aaaand I broke it ;)
Custom CSS does not work when using quotes, e.g. in `font-family: "Foo Bar"`. Django escapes to aggressively.
2012 post on #StackOverflow says: “Use |striptags|safe”
Current #Django docs say: “Warning: Never use |striptags|safe — use bleach.clean()”
Bleach docs: “clean() is not safe to use in CSS context.”
🐇 rabbit hole
(Just not using quotes in CSS works ;)
Edited 137d ago