Merge pull request #80 from DanielnetoDotCom/master

update unstable
WWBN · May 20, 2018 · dd04d44 · dd04d44
2 parents fdfebd1 + cc93a6a
commit dd04d44
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 4 deletions.
diff --git a/view/channel.php b/view/channel.php
@@ -83,7 +83,7 @@
                     </span>
                 </div>
                 <div class="col-md-12">
-                    <?php echo nl2br($user->getAbout()); ?>
+                    <?php echo nl2br(htmlentities($user->getAbout())); ?>
                 </div>
                 <div class="col-md-12">
                     <div class="panel panel-default">

diff --git a/view/channels.php b/view/channels.php
@@ -40,7 +40,7 @@ class="img img-thumbnail img-responsive pull-left" style="max-height: 100px; mar
                                 <?php echo Subscribe::getButton($value['id']); ?> 
                             </span>
                             <div>
-                                <?php echo nl2br($value['about']); ?>
+                                <?php echo nl2br(htmlentities($value['about'])); ?>
                             </div>
                         </div>
                         <div class="clear clearfix">

diff --git a/view/modeYoutube.php b/view/modeYoutube.php
@@ -220,7 +220,7 @@
                                     <meta itemprop="contentURL" content="<?php echo Video::getLink($video['id'], $video['clean_title']); ?>" />
                                     <meta itemprop="embedURL" content="<?php echo Video::getLink($video['id'], $video['clean_title'], true); ?>" />
                                     <meta itemprop="uploadDate" content="<?php echo $video['created']; ?>" />
-                                    <meta itemprop="description" content="<?php echo str_replace('"', '', $video['title']); ?> - <?php echo $video['description']; ?>" />
+                                    <meta itemprop="description" content="<?php echo str_replace('"', '', $video['title']); ?> - <?php echo htmlentities($video['description']); ?>" />
                                 </div>
                                 <div class="col-xs-8 col-sm-8 col-md-8">
                                     <h1 itemprop="name">
@@ -571,7 +571,7 @@ function loadPlayLists() {
                                     <div class="col-xs-4 col-sm-2 col-lg-2 text-right"><strong><?php echo __("Category"); ?>:</strong></div>
                                     <div class="col-xs-8 col-sm-10 col-lg-10"><a class="btn btn-xs btn-default"  href="<?php echo $global['webSiteRootURL']; ?>cat/<?php echo $video['clean_category']; ?>"><span class="<?php echo $video['iconClass']; ?>"></span> <?php echo $video['category']; ?></a></div>
                                     <div class="col-xs-4 col-sm-2 col-lg-2 text-right"><strong><?php echo __("Description"); ?>:</strong></div>
-                                    <div class="col-xs-8 col-sm-10 col-lg-10" itemprop="description"><?php echo nl2br(textToLink($video['description'])); ?></div>
+                                    <div class="col-xs-8 col-sm-10 col-lg-10" itemprop="description"><?php echo nl2br(textToLink(htmlentities($video['description']))); ?></div>
                                 </div>
                             </div>