Remove user script

templates/base.html

@@ -374,11 +374,6 @@
         {{ misc_config.analytics|safe }}
       {% endif %}
 
-      {# Don't run userscript since it may be malicious #}
-      {% if request.user.is_authenticated and request.profile.user_script and not request.user.is_impersonate %}
-        <script type="text/javascript">{{ request.profile.user_script|safe }}</script>
-      {% endif %}
-
       <div id="extra_js">
         {% block extra_js %}{% endblock %}
       </div>

templates/user/edit-profile.html

@@ -57,13 +57,6 @@
 {% block js_media %}
   {% include "timezone/media-js.html" %}
   {{ form.media.js }}
-  <script type="text/javascript">
-    $(function () {
-      $('#ace_user_script').on('ace_load', function (e, editor) {
-        editor.getSession().setMode("ace/mode/javascript");
-      });
-    });
-  </script>
   <script type="text/javascript">
     $(function () {
       $('#disable-2fa-button').click(function () {
@@ -177,10 +170,6 @@
       {{ form.css_background }}
       <div><i>{{form.css_background.help_text}}</i></div>
       <br><br>
-      <div class="block-header">{{ _('User-script') }}:</div>
-      {{ form.user_script }}
-      <hr>
-
       <input type="submit" style="float:right" value="{{ _('Update profile') }}">
     </form>
   </div>