From 62b21528ee6384330e929765ae43a4f843c9a075 Mon Sep 17 00:00:00 2001
From: printempw <h@prinzeugen.net>
Date: Sat, 13 Aug 2016 22:10:28 +0800
Subject: [PATCH] fix escaping custom css/js

---
 resources/views/admin/customize.tpl | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/resources/views/admin/customize.tpl b/resources/views/admin/customize.tpl
index fa5521c7..c2bdc479 100644
--- a/resources/views/admin/customize.tpl
+++ b/resources/views/admin/customize.tpl
@@ -143,8 +143,8 @@
                         <div class="box-body">
                             <?php
                             if (isset($_POST['custom_css']) && isset($_POST['custom_js'])) {
-                                Option::set('custom_css', Utils::convertString($_POST['custom_css']));
-                                Option::set('custom_js', Utils::convertString($_POST['custom_js']));
+                                Option::set('custom_css', $_POST['custom_css']);
+                                Option::set('custom_js', $_POST['custom_js']);
                                 echo '<div class="callout callout-success">设置已保存。</div>';
                             } else {
                                 echo '<div class="callout callout-info">内容将会被追加至每个页面的 &lt;style&gt; 和 &lt;script&gt; 标签中</div>';