Back-office>Collections>Collection_Name>Settings>Advanced - Scroll to: "Skin and Style"

Custom meta tag/css custom section (before </head>)

If the user inputs a css link:

<link type="text/css" rel="stylesheet" href="/some_dir/some.css" />

is converted to:

<link type="text/css" rel="stylesheet" href="/some_dir/some.css"></link>

and violate HTML standards.

The closing "</link>" gets inserted in weird places, such as after JavaScript which cause further issue.

See: /inc/_core/_param.funcs.php on line 2456 function balance_tags ($text)

//line 2519
// if($tag != 'br' && $tag != 'img' && $tag != 'hr' && $tag != 'param' && $tag != 'input')

 if($tag != 'br' && $tag != 'img' && $tag != 'hr' && $tag != 'param' && $tag != 'input' && $tag != 'link')