Pushed to main, rel_3_12, and rel_3_11, along with a follow-up that adds a belt to Rogan's suspenders by applying HTML::Defang to the value of the setting in the OPAC templates. (Running a string through HTML::Defang twice works). That way, any questionable tags included in the CSS will get removed without requiring that the setting be saved again.
Pushed to main, rel_3_12, and rel_3_11, along with a follow-up that adds a belt to Rogan's suspenders by applying HTML::Defang to the value of the setting in the OPAC templates. (Running a string through HTML::Defang twice works). That way, any questionable tags included in the CSS will get removed without requiring that the setting be saved again.
Thanks, Rogan and Jane!