From 5606a2bd1ebe1278cadae974aa70e70460fd1ace Mon Sep 17 00:00:00 2001
From: Yash Kumar <hello@yash.run>
Date: Wed, 2 Sep 2026 01:44:46 +0530
Subject: [PATCH] fix: account for whitespace in style tag regex to prevent XSS

---
 apps/dokploy/pages/_document.tsx | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/apps/dokploy/pages/_document.tsx b/apps/dokploy/pages/_document.tsx
index 127a153d1..b50fd6f12 100644
--- a/apps/dokploy/pages/_document.tsx
+++ b/apps/dokploy/pages/_document.tsx
@@ -82,7 +82,7 @@ Document.getInitialProps = async (
 			metaTitle = config.metaTitle;
 			// Remove any </style> tags to prevent XSS breakout
 			customCss = config.customCss
-				? config.customCss.replace(/<\/style>/gi, "")
+				? config.customCss.replace(/<\/\s*style\s*>/gi, "")
 				: null;
 			faviconHref = config.faviconUrl || null;
 		}