diff options
| author | Omar Roth <omarroth@hotmail.com> | 2018-03-11 10:47:48 -0500 |
|---|---|---|
| committer | Omar Roth <omarroth@hotmail.com> | 2018-03-11 10:47:48 -0500 |
| commit | 8b2d2044b299ed9bfe163673e209f039bcda1239 (patch) | |
| tree | 0e786ff5efeef163b7b37d683ef11855f823ac28 | |
| parent | 496a8bf67beb4e8147034d2cd0bb8e6c9baec9f2 (diff) | |
| download | invidious-8b2d2044b299ed9bfe163673e209f039bcda1239.tar.gz invidious-8b2d2044b299ed9bfe163673e209f039bcda1239.tar.bz2 invidious-8b2d2044b299ed9bfe163673e209f039bcda1239.zip | |
Escape title name
| -rw-r--r-- | src/views/player/audio.ecr | 2 | ||||
| -rw-r--r-- | src/views/player/video.ecr | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/src/views/player/audio.ecr b/src/views/player/audio.ecr index 1122d8d0..35273a61 100644 --- a/src/views/player/audio.ecr +++ b/src/views/player/audio.ecr @@ -1,4 +1,4 @@ -<audio poster="<%= thumbnail %>" title="<%= video.title%>" id="player" class="video-js" data-setup="{}" style="width:100%;" controls> +<audio poster="<%= thumbnail %>" title="<%= HTML.escape(video.title) %>" id="player" class="video-js" data-setup="{}" style="width:100%;" controls> <% adaptive_fmts.each do |fmt| %> <% if fmt["type"].starts_with?("audio") %> <source src="<%= fmt["url"] %>" type='<%= fmt["type"] %>'> diff --git a/src/views/player/video.ecr b/src/views/player/video.ecr index 8e17711f..90abe438 100644 --- a/src/views/player/video.ecr +++ b/src/views/player/video.ecr @@ -1,4 +1,4 @@ -<video poster="<%= thumbnail %>" title="<%= video.title%>" id="player" class="video-js" data-setup="{}" style="width:100%;" controls> +<video poster="<%= thumbnail %>" title="<%= HTML.escape(video.title) %>" id="player" class="video-js" data-setup="{}" style="width:100%;" controls> <% fmt_stream.each do |fmt| %> <source src="<%= fmt["url"]? %>" type='<%= fmt["type"]? %>'> <% end %> |