chenxing
19e414ee81
- validateConfigJson 增 custom_css 分支:≤10240字符;黑名单忽略大小写拒 </style/<script/@import/expression( - 快照/渲染链路(model customCss)与 themeVarsCss 同构注入;缓存失效复用既有 SiteContentChangedEvent - 5 套主题 head.html 于 main.css 与微调变量之后 th:utext 直出(安全性完全依赖服务端先行) - SiteServiceIT+6 例(含 expression 红线项与 10240 边界);PortalSsrIT+3 例(渲染/head内/顺序/缓存失效) - mvn -o test 258 例全绿(B3 状态,不含 B4 红测)
22 lines
1.4 KiB
HTML
22 lines
1.4 KiB
HTML
<!DOCTYPE html>
|
|
<html xmlns:th="http://www.thymeleaf.org" lang="zh-CN">
|
|
<!-- scholar-blue 公共 head 片段：与 default 契约一致（pageTitle/seo/canonical/og/themeVarsCss/favicon 兜底） -->
|
|
<head th:fragment="head">
|
|
<meta charset="UTF-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1">
|
|
<title th:text="${pageTitle}">页面标题</title>
|
|
<meta name="description" th:if="${seoDescription != null and !#strings.isEmpty(seoDescription)}"
|
|
th:content="${seoDescription}">
|
|
<link rel="canonical" th:if="${canonical != null}" th:href="${canonical}">
|
|
<meta property="og:title" th:if="${pageTitle != null}" th:content="${pageTitle}">
|
|
<meta property="og:description" th:if="${seoDescription != null and !#strings.isEmpty(seoDescription)}" th:content="${seoDescription}">
|
|
<meta property="og:image" th:if="${ogImage != null}" th:content="${ogImage}">
|
|
<link rel="stylesheet" th:href="${url.asset('css/main.css')}">
|
|
<style th:if="${not #strings.isEmpty(themeVarsCss)}" th:utext="${themeVarsCss}"></style>
|
|
<!-- 站点级自定义样式（B3）：位于皮肤 CSS 与微调变量之后层叠覆盖；内容经服务端黑名单强校验后直出 -->
|
|
<style th:if="${not #strings.isEmpty(customCss)}" th:utext="${customCss}"></style>
|
|
<link rel="icon" type="image/png"
|
|
th:href="${site.config['favicon'] != null ? url.upload(site.config['favicon']) : url.asset('favicon.png')}">
|
|
</head>
|
|
</html>
|