From 76992581596420680b2cc508116f215dce6ee5fe Mon Sep 17 00:00:00 2001
From: stringsplit <77242831+nbitzz@users.noreply.github.com>
Date: Thu, 11 May 2023 19:25:34 -0700
Subject: [PATCH] patch

---
 src/server/routes/authRoutes.ts           | 4 ++--
 src/svelte/elem/pulldowns/Accounts.svelte | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/server/routes/authRoutes.ts b/src/server/routes/authRoutes.ts
index d2cd0a4..41404eb 100644
--- a/src/server/routes/authRoutes.ts
+++ b/src/server/routes/authRoutes.ts
@@ -142,8 +142,8 @@ authRoutes.post("/customcss", parser, (req,res) => {
     }
     
     if (typeof req.body.fileId != "string") return
-
-    if (id_check_regex.test(req.body.fileId) && req.body.fileId.length <= config.maxUploadIdLength) {
+    
+    if (req.body.fileId.match(id_check_regex) == req.body.fileId && req.body.fileId.length <= config.maxUploadIdLength) {
         acc.customCSS = req.body.fileId
         if (!req.body.fileId) delete acc.customCSS
         Accounts.save()
diff --git a/src/svelte/elem/pulldowns/Accounts.svelte b/src/svelte/elem/pulldowns/Accounts.svelte
index e91f775..0fe571e 100644
--- a/src/svelte/elem/pulldowns/Accounts.svelte
+++ b/src/svelte/elem/pulldowns/Accounts.svelte
@@ -170,7 +170,7 @@
                 </div>
 
                 <button on:click={() => accOpts.customcss(optPicker)}>
-                    <img src="/static/assets/icons/paint.svg" alt="logout_all">
+                    <img src="/static/assets/icons/paint.svg" alt="customcss">
                     <p>Set custom CSS<span><br />{@html $account.customCSS ? `Using file ID <span class="number">${$account.customCSS}</span>` : "No custom CSS set"}</span></p>
                 </button>