From 235a7866b31263e4779c5d451d1fde8062a5571a Mon Sep 17 00:00:00 2001
From: Lyra Bot <lyra@devgnome.com>
Date: Thu, 13 Aug 2026 12:07:20 -0400
Subject: [PATCH] fix: remove incorrect CSS escaping on color values

The Twig |e('css') filter was escaping '#' (0x23) to '\23 ' in hex
color values (bg_color, fg_color, error_color), causing browsers to
not recognize them as valid CSS colors. These are admin-configured
environment variables, not user input, so CSS escaping is unnecessary.
---
 templates/_style.html.twig | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/templates/_style.html.twig b/templates/_style.html.twig
index cac8f83..f65a197 100644
--- a/templates/_style.html.twig
+++ b/templates/_style.html.twig
@@ -1,10 +1,10 @@
 <style id="preauth-style">
 * { margin: 0; padding: 0.25em; }
-html { background-color: {{ env.bg_color|e('css') }}; color: {{ env.fg_color|e('css') }}; display: table;
+html { background-color: {{ env.bg_color }}; color: {{ env.fg_color }}; display: table;
     font-family: sans-serif; font-size: 1.5em; height: 100%; padding: 0; width: 100%; }
 body { display: table-cell; vertical-align: middle; }
 h1 { font-size: 2.5em; font-weight: normal; text-align: center; }
-p { color: {{ env.error_color|e('css') }}; text-align: center; }
+p { color: {{ env.error_color }}; text-align: center; }
 form { align-items: baseline; display: flex; flex-wrap: wrap; justify-content: center; }
 form div { width: 45%; min-width: 300px; }
 div.right { text-align: right; margin-top: 1em; padding-bottom: 0 }