mirrors/nadeko_invidious
1
0
Fork 0
mirror of https://git.nadeko.net/Fijxu/invidious.git synced 2025-12-22 10:58:50 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

HTML escape title on watch and embed pages

Browse Source
This commit is contained in:
Omar Roth
2018-08-01 16:07:47 -05:00
parent 01d23c6191
commit 25bf44d7ad
2 changed files with 7 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/invidious/views/embed.ecr
View File

@@ -14,7 +14,7 @@
<script src="https://unpkg.com/silvermine-videojs-quality-selector@1.1.2/dist/js/silvermine-videojs-quality-selector.min.js"></script>
<script src="https://unpkg.com/videojs-markers@1.0.1/dist/videojs-markers.min.js"></script>
<script src="https://unpkg.com/videojs-share@1.1.0/dist/videojs-share.min.js"></script>
<title><%= video.title %> - Invidious</title>
<title><%= HTML.escape(video.title) %> - Invidious</title>
</head>
<body>
@@ -82,7 +82,7 @@ var shareOptions = {
socials: ["fb", "tw", "reddit", "mail"],
url: "<%= host_url %>/<%= video.id %>?<%= host_params %>",
title: "<%= video.title %>",
title: "<%= HTML.escape(video.title) %>",
description: "<%= description %>",
image: '<%= thumbnail %>',
embedCode: `<iframe id='ivplayer' type='text/html' width='640' height='360'