From e9d43448bc00b4b531d9a8ea95c28a29da5040dc Mon Sep 17 00:00:00 2001
From: Jakub Tomana <jakub.tomana@protonmail.com>
Date: Fri, 30 Jan 2026 21:33:47 +0100
Subject: [PATCH] fix: Potential XSS introduced by contributor

---
 src/settings.md                      |  38 ------
 src/theme/book.js                    |   8 +-
 src/theme/breadcrumbs.js             |  45 +++++--
 src/theme/livetime.js                |  37 ++---
 src/theme/playground.js              |  87 ++++++++----
 src/theme/searcher.js                |  15 ++-
 src/theme/settings/apply-settings.js |  56 --------
 src/theme/settings/code-hg.js        |  22 ++-
 src/theme/settings/index.js          | 194 +--------------------------
 9 files changed, 152 insertions(+), 350 deletions(-)

diff --git a/src/settings.md b/src/settings.md
index 744abef32e6..3262721b381 100644
--- a/src/settings.md
+++ b/src/settings.md
@@ -141,44 +141,6 @@ Let's customize your experience in our Bot Designer For Discord wiki world!
     Added!
 ```
 
-<div class="settingembed">
-  <h2>Code Highlighting</h2>
-  <p>Input your  highlighting code here! Reload the page when you finish.</p>
-  <button class="resetSettingButton" id="resetHG" onClick="resetHGInput()" title="Reset" aria-label="Reset">
-    <i class="fa fa-refresh" aria-hidden="true"></i>
-  </button>
-  <div class="codehighlighting">
-    <button id="copyHG" onClick="copyHGInput()" class="hgButton">
-      <p><i class="fa fa-clipboard" aria-hidden="true"></i> Copy</p>
-    </button>
-    <button id="reloadHG" onClick="reloadHGPage()" class="hgButton">
-      <p><i class="fa fa-circle-o-notch" aria-hidden="true"></i> Save and reload</p>
-    </button>
-    <button class="hgButton">
-      <p><a href="https://www.youtube.com/watch?v=xvFZjo5PgG0"><i class="fa fa-book" aria-hidden="true"></i> What is this?</a></p>
-    </button>
-    <textarea id="jsonhginput" oninput="updateCodeHG()" maxlength="25000"></textarea>
-  </div>
-  <p class="charCount">0 / 25000</p>
-</div>
-
-```
-$nomention
-$allowUserMentions[]
-$reply
-$botTyping
-
-$try
-  $sendMessage[Hello, $username 👋, ping: $ping ms]
-  $if[$toLowercase[$message]==secret]
-    $footer[BDFD 🤩]
-  $endif
-$catch
-  $sendMessage[Bye!]
-  $botLeave $c[Magic😉]
-$endtry
-```
-
 <div class="importantReset">
 	<button class="resetToDefault" onmousedown="resetAllHover()" onmouseup="resettAllNone()" onmouseleave="resetAllLeave()">
 		<span>Reset to default settings</span>
diff --git a/src/theme/book.js b/src/theme/book.js
index b75236bca88..0939a29f689 100644
--- a/src/theme/book.js
+++ b/src/theme/book.js
@@ -29,7 +29,9 @@ if (window.playground_copyable) {
 			clipButton.className = "fa fa-regular fa-paste clip-button";
 			clipButton.title = "Copy";
 			clipButton.setAttribute("aria-label", clipButton.title);
-			clipButton.innerHTML = '<i class="tooltiptext"></i>';
+			const tooltipEl = document.createElement('i');
+			tooltipEl.className = 'tooltiptext';
+			clipButton.appendChild(tooltipEl);
 
 			const wrapButton = document.createElement("button");
 			wrapButton.className = "fa fa-solid fa-paragraph wrap-button";
@@ -223,12 +225,12 @@ if (window.playground_copyable) {
 	const clipButtons = document.querySelectorAll(".clip-button");
 
 	function hideTooltip(elem) {
-		elem.firstChild.innerText = "";
+		elem.firstChild.textContent = "";
 		elem.className = "fa far fa-clipboard clip-button";
 	}
 
 	function showTooltip(elem, msg) {
-		elem.firstChild.innerText = msg;
+		elem.firstChild.textContent = msg;
 		elem.className = "fa far fa-clipboard tooltipped";
 	}
 
diff --git a/src/theme/breadcrumbs.js b/src/theme/breadcrumbs.js
index a5f6961418e..3f414851965 100644
--- a/src/theme/breadcrumbs.js
+++ b/src/theme/breadcrumbs.js
@@ -64,15 +64,38 @@ for (let i = 0; i < paths.length; i++) {
 	}
 }
 
-document.write(`<a href="${root}">Home</a><p>/</p>`);
-breadcrumbLinks.forEach((link, index) => {
-	if (link.href) {
-		document.write(`<a href="${link.href}">${link.name}</a>`);
-		if (index < breadcrumbLinks.length - 1) {
-			// Add separator if not last
-			document.write(`<p>/</p>`);
-		}
-	} else if (link.name !== "Introduction") {
-		document.write(`<a>${link.name}</a>`);
+// Helper to safely create elements
+function createBreadcrumbLink(href, text) {
+	const link = document.createElement('a');
+	if (href) {
+		link.href = href;
 	}
-});
+	link.textContent = text;
+	return link;
+}
+
+function createSeparator() {
+	const sep = document.createElement('p');
+	sep.textContent = '/';
+	return sep;
+}
+
+// Build breadcrumbs using DOM methods instead of document.write
+(function renderBreadcrumbs() {
+	const container = document.currentScript.parentElement;
+
+	// Home link
+	container.appendChild(createBreadcrumbLink(root, 'Home'));
+	container.appendChild(createSeparator());
+
+	breadcrumbLinks.forEach((link, index) => {
+		if (link.href) {
+			container.appendChild(createBreadcrumbLink(link.href, link.name));
+			if (index < breadcrumbLinks.length - 1) {
+				container.appendChild(createSeparator());
+			}
+		} else if (link.name !== "Introduction") {
+			container.appendChild(createBreadcrumbLink(null, link.name));
+		}
+	});
+})();
diff --git a/src/theme/livetime.js b/src/theme/livetime.js
index fc0c9f31052..828c8292104 100644
--- a/src/theme/livetime.js
+++ b/src/theme/livetime.js
@@ -13,50 +13,54 @@ document.addEventListener("DOMContentLoaded", function () {
 
     var dayElement = document.getElementById("day-mark");
     if (dayElement) {
-        dayElement.innerHTML = "Current Day: " + day;
+        dayElement.textContent = "Current Day: " + day;
     }
 
     var unixElement = document.getElementById("unix-mark");
     if (unixElement) {
-        unixElement.innerHTML = "Current Unix-time: " + unixTimeSec;
+        unixElement.textContent = "Current Unix-time: " + unixTimeSec;
     }
 
     var moreUnixElement = document.getElementById("moreunix-mark");
     if (moreUnixElement) {
-        moreUnixElement.innerHTML = `Unix Timestamp<br>
-In Seconds - ${unixTimeSec}<br>
-In Milliseconds - ${unixTimeMs}<br>
-In Nanoseconds - ${unixTimeMs * 1000000}`;
+        moreUnixElement.textContent = '';
+        moreUnixElement.appendChild(document.createTextNode('Unix Timestamp'));
+        moreUnixElement.appendChild(document.createElement('br'));
+        moreUnixElement.appendChild(document.createTextNode('In Seconds - ' + unixTimeSec));
+        moreUnixElement.appendChild(document.createElement('br'));
+        moreUnixElement.appendChild(document.createTextNode('In Milliseconds - ' + unixTimeMs));
+        moreUnixElement.appendChild(document.createElement('br'));
+        moreUnixElement.appendChild(document.createTextNode('In Nanoseconds - ' + (unixTimeMs * 1000000)));
     }
 
     var secondElement = document.getElementById("second-mark");
     if (secondElement) {
-        secondElement.innerHTML = "Current Second: " + second;
+        secondElement.textContent = "Current Second: " + second;
     }
 
     var minuteElement = document.getElementById("minute-mark");
     if (minuteElement) {
-        minuteElement.innerHTML = "Current Minute: " + minute;
+        minuteElement.textContent = "Current Minute: " + minute;
     }
 
     var hourElement = document.getElementById("hour-mark");
     if (hourElement) {
-        hourElement.innerHTML = "Current Hour: " + hour;
+        hourElement.textContent = "Current Hour: " + hour;
     }
 
     var yearElement = document.getElementById("year-mark");
     if (yearElement) {
-        yearElement.innerHTML = "Current Year: " + year;
+        yearElement.textContent = "Current Year: " + year;
     }
 
     var monthElement = document.getElementById("month-mark");
     if (monthElement) {
-        monthElement.innerHTML = "Current Month: " + month;
+        monthElement.textContent = "Current Month: " + month;
     }
 
     var dateElement = document.getElementById("date-mark");
     if (dateElement) {
-        dateElement.innerHTML = "Current Date: " + formattedDate;
+        dateElement.textContent = "Current Date: " + formattedDate;
     }
 
     function getFormattedTime(timezone) {
@@ -75,7 +79,10 @@ In Nanoseconds - ${unixTimeMs * 1000000}`;
         var utcTime = getFormattedTime("UTC");
         var moscowTime = getFormattedTime("Europe/Moscow");
         var utcDay = now.getUTCDate();
-        
-        timeElement.innerHTML = `New York Time: ${utcTime}, ${utcDay}<br>Moscow Time: ${moscowTime}, ${utcDay}`;
+
+        timeElement.textContent = '';
+        timeElement.appendChild(document.createTextNode('New York Time: ' + utcTime + ', ' + utcDay));
+        timeElement.appendChild(document.createElement('br'));
+        timeElement.appendChild(document.createTextNode('Moscow Time: ' + moscowTime + ', ' + utcDay));
     }
-});
\ No newline at end of file
+});
diff --git a/src/theme/playground.js b/src/theme/playground.js
index 3a70c852a08..089b184f8ff 100644
--- a/src/theme/playground.js
+++ b/src/theme/playground.js
@@ -1,10 +1,43 @@
+// Helper to escape HTML special characters
+function escapeHTML(str) {
+  const div = document.createElement('div');
+  div.textContent = str;
+  return div.innerHTML;
+}
+
+// Helper to create error message element safely
+function createErrorMessage(functionName, lineNumber, position, errorText) {
+  const playOutput = document.getElementById('play-output');
+  playOutput.textContent = '';
+
+  const container = document.createDocumentFragment();
+
+  container.appendChild(document.createTextNode('\u274C Function '));
+
+  const funcNameEl = document.createElement('span');
+  funcNameEl.id = 'errorFunctionName';
+  funcNameEl.textContent = functionName;
+  container.appendChild(funcNameEl);
+
+  container.appendChild(document.createTextNode(' at '));
+
+  const lineNumEl = document.createElement('span');
+  lineNumEl.id = 'errorLineNumber';
+  lineNumEl.textContent = `${lineNumber}:${position}`;
+  container.appendChild(lineNumEl);
+
+  container.appendChild(document.createTextNode(` returned an error: ${errorText}`));
+
+  playOutput.appendChild(container);
+}
+
 // Math
 function handlePlaygroundInput(inputValue, functionName, operation) {
   const playOutput = document.getElementById('play-output');
 
   if (!isNaN(inputValue) && inputValue !== "") {
     if (functionName === '$sqrt' && parseFloat(inputValue) < 0) {
-      playOutput.innerHTML = `❌ Function <p id="errorFunctionName">${functionName}</p> at <p id="errorLineNumber">1:${functionName.length + 4}</p> returned an error: the input number can't be negative`;
+      createErrorMessage(functionName, 1, functionName.length + 4, "the input number can't be negative");
     } else {
       const result = operation(inputValue);
       playOutput.textContent = `Result: ${result}`;
@@ -13,21 +46,21 @@ function handlePlaygroundInput(inputValue, functionName, operation) {
     if (inputValue === "") {
       outputEmptyValueError(functionName, 1, 1);
     } else {
-      let nonNumericIndex = inputValue.search(/[^0-9\.]/); 
+      let nonNumericIndex = inputValue.search(/[^0-9\.]/);
       nonNumericIndex = nonNumericIndex === -1 ? inputValue.length : nonNumericIndex + functionName.length + 3;
-      playOutput.innerHTML = `❌ Function <p id="errorFunctionName">${functionName}</p> at <p id="errorLineNumber">1:${nonNumericIndex}</p> returned an error: expected integer in position 1, got '${inputValue}'`;
+      createErrorMessage(functionName, 1, nonNumericIndex, `expected integer in position 1, got '${escapeHTML(inputValue)}'`);
     }
   }
 }
 
 // $ceil[]
 function ceilPlayground(inputValue) {
-  handlePlaygroundInput(inputValue, '$ceil', Math.ceil); 
+  handlePlaygroundInput(inputValue, '$ceil', Math.ceil);
 }
 
 // $floor[]
 function floorPlayground(inputValue) {
-  handlePlaygroundInput(inputValue, '$floor', Math.floor); 
+  handlePlaygroundInput(inputValue, '$floor', Math.floor);
 }
 
 // $sqrt[]
@@ -37,7 +70,7 @@ function sqrtPlayground(inputValue) {
 
 // $round[]
 function roundPlayground(inputValue) {
-  handlePlaygroundInput(inputValue, '$round', Math.round); 
+  handlePlaygroundInput(inputValue, '$round', Math.round);
 }
 
 // $charCount[]
@@ -64,7 +97,7 @@ function argCountPlayground(inputValue) {
 // $isNumber[]
 function isNumberPlayground(inputValue) {
   const playOutput = document.getElementById('play-output');
-  playOutput.textContent = `Is number? ${!isNaN(parseFloat(inputValue)) && isFinite(inputValue)}`; 
+  playOutput.textContent = `Is number? ${!isNaN(parseFloat(inputValue)) && isFinite(inputValue)}`;
 }
 
 // $isInteger[]
@@ -90,42 +123,51 @@ function isBooleanPlayground(inputValue) {
   playOutput.textContent = `Is boolean? ${booleanValues.includes(inputValue)}`;
 }
 
-function preserveLineBreaks(text) {
-  return text.replace(/\n/g, '<br>');
-}
-
 function limitLines(text, maxLines) {
   const lines = text.split('\n');
   return lines.slice(0, maxLines).join('\n');
 }
 
+// Helper to safely display multiline text
+function displayMultilineText(element, text) {
+  element.textContent = '';
+  const lines = text.split('\n');
+  lines.forEach((line, index) => {
+    element.appendChild(document.createTextNode(line));
+    if (index < lines.length - 1) {
+      element.appendChild(document.createElement('br'));
+    }
+  });
+}
+
 // $trimSpace[]
 function trimSpacePlayground(inputValue) {
   const playOutput = document.getElementById('play-output');
-  playOutput.innerHTML = preserveLineBreaks(limitLines(inputValue.trim(), 20));
+  displayMultilineText(playOutput, limitLines(inputValue.trim(), 20));
   editInputHeight()
 }
 
 // $toLowercase[]
 function toLowercasePlayground(inputValue) {
   const playOutput = document.getElementById('play-output');
-  playOutput.innerHTML = preserveLineBreaks(limitLines(inputValue.toLowerCase(), 20));
+  displayMultilineText(playOutput, limitLines(inputValue.toLowerCase(), 20));
   editInputHeight()
 }
 
 // $toUppercase[]
 function toUppercasePlayground(inputValue) {
   const playOutput = document.getElementById('play-output');
-  playOutput.innerHTML = preserveLineBreaks(limitLines(inputValue.toUpperCase(), 20));
+  displayMultilineText(playOutput, limitLines(inputValue.toUpperCase(), 20));
   editInputHeight()
 }
 
 // $toTitleCase[]
 function toTitleCasePlayground(inputValue) {
   const playOutput = document.getElementById('play-output');
-  playOutput.innerHTML = preserveLineBreaks(limitLines(inputValue.replace(/\w\S*/g, (word) => 
-    word.charAt(0).toUpperCase() + word.slice(1).toLowerCase() 
-  ), 20));
+  const titleCased = inputValue.replace(/\w\S*/g, (word) =>
+    word.charAt(0).toUpperCase() + word.slice(1).toLowerCase()
+  );
+  displayMultilineText(playOutput, limitLines(titleCased, 20));
   editInputHeight()
 }
 
@@ -139,11 +181,11 @@ function randomStringPlayground(inputValue) {
   } else if (isNaN(inputValue)) {
     let nonNumericIndex = inputValue.search(/[^0-9]/);
     nonNumericIndex = nonNumericIndex === -1 ? inputValue.length : nonNumericIndex + functionName.length + 3;
-    playOutput.innerHTML = `❌ Function <p id="errorFunctionName">${functionName}</p> at <p id="errorLineNumber">1:${nonNumericIndex}</p> returned an error: expected integer in position 1, got '${inputValue}'`;
+    createErrorMessage(functionName, 1, nonNumericIndex, `expected integer in position 1, got '${escapeHTML(inputValue)}'`);
   } else if (parseInt(inputValue) > 10) {
-    playOutput.innerHTML = `❌ Function <p id="errorFunctionName">${functionName}</p> at <p id="errorLineNumber">1:${functionName.length + 3}</p> returned an error: String length has to be leser than 10`;
-  } else if (parseInt(inputValue) < 1) { 
-    playOutput.innerHTML = `❌ Function <p id="errorFunctionName">${functionName}</p> at <p id="errorLineNumber">1:${functionName.length + 3}</p> returned an error: String length has to be bigger than 0`;
+    createErrorMessage(functionName, 1, functionName.length + 3, "String length has to be leser than 10");
+  } else if (parseInt(inputValue) < 1) {
+    createErrorMessage(functionName, 1, functionName.length + 3, "String length has to be bigger than 0");
   } else {
     let length = parseInt(inputValue);
     playOutput.textContent = `Random String: ` + generateRandomString(length);
@@ -162,8 +204,7 @@ function generateRandomString(length) {
 
 // Empty value error
 function outputEmptyValueError(functionName, lineNumber, position) {
-  const playOutput = document.getElementById('play-output');
-  playOutput.innerHTML  = `❌ Function <p id="errorFunctionName">${functionName}</p> at <p id="errorLineNumber">${lineNumber}:${functionName.length + 2}</p> returned an error: expected valid value in position ${position}, got empty value`;
+  createErrorMessage(functionName, lineNumber, functionName.length + 2, `expected valid value in position ${position}, got empty value`);
 }
 
 // Better input size for large values
diff --git a/src/theme/searcher.js b/src/theme/searcher.js
index 649287256ba..dffc85d17bb 100644
--- a/src/theme/searcher.js
+++ b/src/theme/searcher.js
@@ -152,7 +152,7 @@ window.search = window.search || {};
         var searchterms = encodeURIComponent(searchterms.join(" ")).replace(/\'/g, "%27");
 
         return '<a href="' + path_to_root + url[0] + '?' + URL_MARK_PARAM + '=' + searchterms + '#' + url[1]
-            + '"><span class="search-result-title">' + result.doc.breadcrumbs + '</span>'
+            + '"><span class="search-result-title">' + escapeHTML(result.doc.breadcrumbs) + '</span>'
             + '<span class="teaser" id="teaser_' + teaser_count + '" aria-label="Search Result Teaser">'
             + teaser + '</span></a>';
     }
@@ -368,7 +368,18 @@ window.search = window.search || {};
                     searchbar.select();
                 }
             } else { // SELECT_KEYCODE
-                window.location.assign(focused.querySelector('a'));
+                var link = focused.querySelector('a');
+                if (link && link.href) {
+                    // Validate URL is relative or same origin
+                    try {
+                        var url = new URL(link.href, window.location.origin);
+                        if (url.origin === window.location.origin) {
+                            window.location.assign(link.href);
+                        }
+                    } catch (e) {
+                        // Invalid URL, ignore
+                    }
+                }
             }
         }
     }
diff --git a/src/theme/settings/apply-settings.js b/src/theme/settings/apply-settings.js
index ca8abfae7f9..d3de70d2486 100644
--- a/src/theme/settings/apply-settings.js
+++ b/src/theme/settings/apply-settings.js
@@ -153,62 +153,6 @@ function applySettings() {
         "language": "en",
         "text-hg": "none",
         "text-font": "Open Sans, sans-serif",
-        "code-hg": {
-            defaultTextHighlight: {
-                color: 4288341353,
-                style: 0,
-            },
-            fallbackHighlight: {
-                color: 4285791231,
-                style: 0,
-            },
-            bracketHighlight: {
-                color: 4294921292,
-                style: 1,
-            },
-            semicolonHighlight: {
-                color: 4294920266,
-                style: 1,
-            },
-            functionsHighlights: {
-                $nomention: {
-                    color: 4294932473,
-                    style: 0,
-                },
-                $catch: {
-                    color: 4288905212,
-                    style: 0,
-                },
-                $else: {
-                    color: 4288905212,
-                    style: 0,
-                },
-                $elseif: {
-                    color: 4288905212,
-                    style: 0,
-                },
-                $endif: {
-                    color: 4288905212,
-                    style: 0,
-                },
-                $endtry: {
-                    color: 4288905212,
-                    style: 0,
-                },
-                $error: {
-                    color: 4288905212,
-                    style: 0,
-                },
-                $if: {
-                    color: 4288905212,
-                    style: 0,
-                },
-                $try: {
-                    color: 4288905212,
-                    style: 0,
-                },
-            },
-        },
     };
 
     if (!data) localStorage.setItem("json", JSON.stringify(defaultData));
diff --git a/src/theme/settings/code-hg.js b/src/theme/settings/code-hg.js
index 118f3e6f18a..8c357d181a5 100644
--- a/src/theme/settings/code-hg.js
+++ b/src/theme/settings/code-hg.js
@@ -91,24 +91,18 @@ function fontStyle(style) {
 
 function escapeHtml(unsafe) {
 	return unsafe
-		.replace(/&/g, "&amp")
-		.replace(/</g, "&lt")
-		.replace(/>/g, "&gt")
-		.replace(/"/g, "&quot");
+		.replace(/&/g, "&amp;")
+		.replace(/</g, "&lt;")
+		.replace(/>/g, "&gt;")
+		.replace(/"/g, "&quot;");
 }
 
 function highlight(scheme) {
 	const codeBlocks = document.querySelectorAll("pre code");
-    
-    	// Check if the domain contains "javascript"
-    	if (window.location.href.includes("javascript")) {
-        	return;
-    	}
-	
-	try {
-		if (localStorage.getItem("code-hg"))
-			scheme = JSON.parse(localStorage.getItem("code-hg"));
-	} catch {}
+
+	if (window.location.href.includes("javascript")) {
+		return;
+	}
 
 	codeBlocks.forEach((codeBlock) => {
 		let code = escapeHtml(codeBlock.textContent);
diff --git a/src/theme/settings/index.js b/src/theme/settings/index.js
index a8b4faa088d..0326fd043fe 100644
--- a/src/theme/settings/index.js
+++ b/src/theme/settings/index.js
@@ -1,60 +1,3 @@
-const codeScheme = {
-	defaultTextHighlight: {
-		color: 4288341353,
-		style: 0,
-	},
-	fallbackHighlight: {
-		color: 4285791231,
-		style: 0,
-	},
-	bracketHighlight: {
-		color: 4294921292,
-		style: 1,
-	},
-	semicolonHighlight: {
-		color: 4294920266,
-		style: 1,
-	},
-	functionsHighlights: {
-		$nomention: {
-			color: 4294932473,
-			style: 0,
-		},
-		$catch: {
-			color: 4288905212,
-			style: 0,
-		},
-		$else: {
-			color: 4288905212,
-			style: 0,
-		},
-		$elseif: {
-			color: 4288905212,
-			style: 0,
-		},
-		$endif: {
-			color: 4288905212,
-			style: 0,
-		},
-		$endtry: {
-			color: 4288905212,
-			style: 0,
-		},
-		$error: {
-			color: 4288905212,
-			style: 0,
-		},
-		$if: {
-			color: 4288905212,
-			style: 0,
-		},
-		$try: {
-			color: 4288905212,
-			style: 0,
-		},
-	},
-};
-
 const fonts = {
 	font2: "Georgia, serif",
 	font3: "Montserrat",
@@ -100,28 +43,6 @@ function resetFontSize() {
 	updateJsonFile("text-size", range.value + "%");
 }
 
-function resetHGInput() {
-	const codeInput = document.getElementById("jsonhginput");
-	const charCountElement = document.querySelector(".charCount");
-
-	var inputcodedesign = JSON.stringify(codeScheme);
-	const charJSONCount = inputcodedesign.length;
-
-	charCountElement.textContent = `${charJSONCount} / 10000`;
-
-	codeInput.style.boxShadow = "none";
-	codeInput.value = inputcodedesign;
-
-	localStorage.setItem("code-hg", inputcodedesign);
-}
-
-function copyHGInput() {
-	const textarea = document.getElementById("jsonhginput");
-	navigator.clipboard
-		.writeText(textarea.value)
-		.catch((err) => console.error("Failed copying to clipboard", err));
-}
-
 function changeDiscordTheme(colorId) {
 	const discordMessages = document.getElementsByTagName("discord-messages");
 
@@ -162,7 +83,12 @@ function changeTextFont(fontId) {
 }
 
 function updateJsonFile(key, value) {
-	let data = JSON.parse(localStorage.getItem("json")) || {};
+	let data = {};
+	try {
+		data = JSON.parse(localStorage.getItem("json")) || {};
+	} catch (e) {
+		data = {};
+	}
 
 	data[key] = value;
 
@@ -284,46 +210,9 @@ function resetAllLeave() {
 	}
 }
 
-function updateCodeHG() {
-	const codeInput = document.getElementById("jsonhginput");
-	const charCountElement = document.querySelector(".charCount");
-	const jsonHG = codeInput.value;
-
-	const charCount = codeInput.value.replace(/[\s\n]/g, "").length; // Ignore spaces and new rows
-	charCountElement.textContent = `${charCount} / 25000`;
-
-	if (charCount > 25000) {
-		charCountElement.style.color = "red";
-	} else {
-		charCountElement.style.color = "";
-	}
-
-	if (isJson(jsonHG)) {
-		codeInput.style.boxShadow = "0 0 10px green";
-		localStorage.setItem("code-hg", jsonHG);
-	} else {
-		codeInput.style.boxShadow = "0 0 10px red";
-	}
-}
-
-function isJson(str) {
-	try {
-		JSON.parse(str);
-		return true;
-	} catch {
-		return false;
-	}
-}
-
-function reloadHGPage() {
-	location.reload();
-}
-
 function loadSettings() {
 	const displaySize = document.getElementById("display-size");
 	const range = document.getElementById("textsize");
-	const codeTextInput = document.getElementById("jsonhginput");
-	const charCountElement = document.querySelector(".charCount");
 
 	let data;
 
@@ -337,79 +226,8 @@ function loadSettings() {
 		"language": "en",
 		"text-hg": "none",
 		"text-font": "Open Sans, sans-serif",
-		"code-hg": {
-			defaultTextHighlight: {
-				color: 4288341353,
-				style: 0,
-			},
-			fallbackHighlight: {
-				color: 4285791231,
-				style: 0,
-			},
-			bracketHighlight: {
-				color: 4294921292,
-				style: 1,
-			},
-			semicolonHighlight: {
-				color: 4294920266,
-				style: 1,
-			},
-			functionsHighlights: {
-				$nomention: {
-					color: 4294932473,
-					style: 0,
-				},
-				$catch: {
-					color: 4288905212,
-					style: 0,
-				},
-				$else: {
-					color: 4288905212,
-					style: 0,
-				},
-				$elseif: {
-					color: 4288905212,
-					style: 0,
-				},
-				$endif: {
-					color: 4288905212,
-					style: 0,
-				},
-				$endtry: {
-					color: 4288905212,
-					style: 0,
-				},
-				$error: {
-					color: 4288905212,
-					style: 0,
-				},
-				$if: {
-					color: 4288905212,
-					style: 0,
-				},
-				$try: {
-					color: 4288905212,
-					style: 0,
-				},
-			},
-		},
 	};
 
-	var codedesign = data["code-hg"];
-
-	if (codeTextInput) {
-		try {
-			if (localStorage.getItem("code-hg"))
-				codedesign = JSON.parse(localStorage.getItem("code-hg"));
-		} catch {}
-
-		var inputcodedesign = JSON.stringify(codedesign);
-		const charJSONCount = inputcodedesign.length;
-
-		charCountElement.textContent = `${charJSONCount} / 25000`;
-		codeTextInput.value = inputcodedesign;
-	}
-
 	if (displaySize) {
 		displaySize.textContent = data["text-size"].replace("%", "");
 		range.value = parseInt(data["text-size"].replace("%", ""));