CypherpunkSamurai/NewPipeExtractor
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Fix for potential XSS attacks.

Browse source
This commit is contained in:
Kavin 2022-12-31 20:05:32 +00:00
parent f45966d449
commit 01acf79436
No known key found for this signature in database
GPG key ID: 49451E4482CC5BCD
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
extractor/src/main/java/org/schabi/newpipe/extractor/services/youtube/YoutubeParsingHelper.java
View file

@ -33,7 +33,7 @@ import com.grack.nanojson.JsonObject;
import com.grack.nanojson.JsonParser; import com.grack.nanojson.JsonParser;
import com.grack.nanojson.JsonParserException; import com.grack.nanojson.JsonParserException;
import com.grack.nanojson.JsonWriter; import com.grack.nanojson.JsonWriter;
import org.jsoup.nodes.Entities;
import org.schabi.newpipe.extractor.MetaInfo; import org.schabi.newpipe.extractor.MetaInfo;
import org.schabi.newpipe.extractor.downloader.Response; import org.schabi.newpipe.extractor.downloader.Response;
import org.schabi.newpipe.extractor.exceptions.AccountTerminatedException; import org.schabi.newpipe.extractor.exceptions.AccountTerminatedException;
@ -967,7 +967,7 @@ public final class YoutubeParsingHelper {
textBuilder.append("<s>"); textBuilder.append("<s>");
} }
textBuilder.append(text); textBuilder.append(Entities.escape(text));
if (strikethrough) { if (strikethrough) {
textBuilder.append("</s>"); textBuilder.append("</s>");