Install
Works with Drupal: ^10 || ^11Using dev releases is not recommended, except for testing.
Using Composer to manage Drupal site dependencies
Alternative installation files
Download tar.gz
264.07 KB
MD5: c9994a3b26a193c6f00bbac0cde97205
SHA-1: 26912aeb290e3baa590f22eca9f8ee9688d9329e
SHA-256: 268ad6d3644f444fde57af75f7e3964304c7ca2aaf90cc6b4354cabe6f856216
Download zip
285.51 KB
MD5: ae3d978dc8a8993d2d49aee74bfedcda
SHA-1: 19588f97c7089de780bc5b5114da9cda3ad08c3d
SHA-256: bd491eca21099a0a2bb22b3babe9c1d346817baeac3582b8a3ea686165d52ee0
Release notes
Initial stable release for Drupal 10 and 11.
Summary
Stylify is an on-site CSS editor with live preview for global, administrative, route, entity, and content-type stylesheets. CSS is stored in the database and rendered on matching pages.
Features
- On-page CSS editor with Ace syntax highlighting (lazy-loaded)
- Live preview while editing
- Scoped stylesheets: global, admin global, route/view, entity type, content type, and individual entity
- Editor locking workflow (acquire lock, save, unlock)
- Granular permissions for global, admin, and entity CSS
- Break-glass full access permission (requires Manage Stylify settings)
- Central admin UI to list, edit, delete, export, and import stylesheets
- Cache-aware stylesheet loading with cache tag invalidation
- CSRF protection and flood control on editor API endpoints
- Basic CSS validation for disallowed patterns
- Empty stylesheets are not attached to pages
Administration
- Configuration → System → Stylify stylesheets — manage all saved CSS
- Configuration → System → Stylify Settings — clear stale editor locks
Editor workflow
- Click CSS Editor on any permitted page
- Select stylesheet scope
- Click Edit to lock and edit
- Click Save and Save & close when finished
Requirements
- Drupal ^10 || ^11
- No contributed dependencies
Third-party libraries
- Ace Editor 1.36.5 (BSD 3-Clause License)
Security
Important: Custom CSS affects all visitors who can see the page. Grant Stylify permissions only to trusted administrators. CSS validation reduces some risks but does not make untrusted CSS safe.
Known limitations
- Admin stylesheet edit/import bypasses on-page editor locks (intentional break-glass behavior)
- Editor locks expire after one hour without activity refresh