Escape title name

pull/3/head
Omar Roth 7 years ago
parent 496a8bf67b
commit 8b2d2044b2

@ -1,4 +1,4 @@
<audio poster="<%= thumbnail %>" title="<%= video.title%>" id="player" class="video-js" data-setup="{}" style="width:100%;" controls> <audio poster="<%= thumbnail %>" title="<%= HTML.escape(video.title) %>" id="player" class="video-js" data-setup="{}" style="width:100%;" controls>
<% adaptive_fmts.each do |fmt| %> <% adaptive_fmts.each do |fmt| %>
<% if fmt["type"].starts_with?("audio") %> <% if fmt["type"].starts_with?("audio") %>
<source src="<%= fmt["url"] %>" type='<%= fmt["type"] %>'> <source src="<%= fmt["url"] %>" type='<%= fmt["type"] %>'>

@ -1,4 +1,4 @@
<video poster="<%= thumbnail %>" title="<%= video.title%>" id="player" class="video-js" data-setup="{}" style="width:100%;" controls> <video poster="<%= thumbnail %>" title="<%= HTML.escape(video.title) %>" id="player" class="video-js" data-setup="{}" style="width:100%;" controls>
<% fmt_stream.each do |fmt| %> <% fmt_stream.each do |fmt| %>
<source src="<%= fmt["url"]? %>" type='<%= fmt["type"]? %>'> <source src="<%= fmt["url"]? %>" type='<%= fmt["type"]? %>'>
<% end %> <% end %>

Loading…
Cancel
Save