diff --git a/internal/webapp/authlocal.go b/internal/webapp/authlocal.go index b78cfd2..9c83524 100644 --- a/internal/webapp/authlocal.go +++ b/internal/webapp/authlocal.go @@ -544,25 +544,31 @@ func authPage(w http.ResponseWriter, title, body string) { %s β€” BearDrive

%s

%s
`, +code{background:rgba(255,255,255,.06);border:1px solid rgba(255,255,255,.08);padding:2px 6px;border-radius:5px; +font-family:ui-monospace,Menlo,monospace} +

%s

%s
`, html.EscapeString(title), html.EscapeString(title), body) } @@ -598,13 +604,13 @@ func (a *BuiltinAuth) pageLogin(w http.ResponseWriter, r *http.Request) { if a.AllowSignup { note := "" if len(a.AllowedDomains) > 0 { - note = ` (` + html.EscapeString(a.domainList()) + ` only)` + note = ` (` + html.EscapeString(a.domainList()) + ` only)` } signup = fmt.Sprintf(`

No account? Sign up%s

`, url.QueryEscape(next), note) } brand := "" if a.Brand != "" { - brand = `

` + html.EscapeString(a.Brand) + `

` + brand = `

` + html.EscapeString(a.Brand) + `

` } authPage(w, "Sign in", brand+inviteBanner(next)+fmt.Sprintf(`
%s%s%s
%s

Forgot password?

`, @@ -653,7 +659,7 @@ func (a *BuiltinAuth) pageSignup(w http.ResponseWriter, r *http.Request) { } brand := "" if a.Brand != "" { - brand = `

` + html.EscapeString(a.Brand) + `

` + brand = `

` + html.EscapeString(a.Brand) + `

` } authPage(w, "Create account", brand+inviteBanner(next)+fmt.Sprintf(`
%s%s%s%s%s

Have an account? Sign in

`, diff --git a/internal/webapp/shares.go b/internal/webapp/shares.go index 3a1242c..77f8ea4 100644 --- a/internal/webapp/shares.go +++ b/internal/webapp/shares.go @@ -329,11 +329,12 @@ func (s *Server) handleShared(w http.ResponseWriter, r *http.Request) { const sharedMarkdownShell = ` %s