mirror of
https://github.com/iv-org/invidious.git
synced 2024-11-22 13:37:24 +00:00
HTML escape video mimetype
Video mimetype may contain code information between double quotes. If not properly escaped, it breaks the browser's parser. E.g: ``` type="video/mp4; codecs=" avc1.64001f,="" mp4a.40.2""="" ``` Thank Robin for catching this!
This commit is contained in:
parent
50c8afb525
commit
947fe4fbb3
@ -23,7 +23,7 @@
|
||||
src_url += "&local=true" if params.local
|
||||
|
||||
quality = fmt["quality"]
|
||||
mimetype = fmt["mimeType"]
|
||||
mimetype = HTML.escape(fmt["mimeType"].as_s)
|
||||
|
||||
selected = params.quality ? (params.quality == quality) : (i == 0)
|
||||
%>
|
||||
|
Loading…
Reference in New Issue
Block a user