Administrator does not have permission to modify CSS

giter

POST https://www.***.com/api/settings  //my fourm site

<html>
<head>
	<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
	<title>403 Forbidden</title>
</head>
<body>
<div id='main' style='display:none'>
<i><h2>Something error:</h2></i>
<p><h3>403 Forbidden</h3><h3><font color='red'>access denied by input filter.</font></h3></p>
<p>Please check or <a href='javascript:location.reload()'>try again</a> later.</p>
<div>hostname: kangle web server</div><hr>
<div id='pb'>Generated by <a href='https://www.cdnbest.com/?code=403' target=_blank>kangle/3.5.19.1</a>.
</div>
</div>

NO PERMISSION

Whether I restore the backup or clear the cache or set another account as an administrator and then modify the CSS, the warning still indicates that I have no permission.

I didn't find any error messages in logs.In the logs directory, I only found the records of April 6, but I didn't find the records of April 8 (today)

During this period, I did not set any behavior that would lead to errors.

giter

After I modified CSS for a while, I found that this code was the cause of the problem：

.sideNav .Dropdown--select .Dropdown-menu>.Dropdown-separator {
    box-shadow: 0 1px 0px 0 #506B92 !important;
}

When I delete it, the warning will not prompt an error, nor will I add other CSS.

Why does this code cause the problem of unauthorized modification?

clarkwinkelmann

giter it appears the request was denied by a filter in your web server, not by Flarum. Most likely the CSS triggers some kind of anti-XSS protection.

I am not familiar with that "kangle" software but you should check their documentation for how to customize that "input filter". Keep in mind it's not a software Flarum officially supports, so you might want to switch to one of the recommended web servers (Apache/Nginx) if that one doesn't work.

When I search for "kangle access denied by input filter" on Google I find a few old threads in languages I don't understand, but maybe there's some information there.