タイトルに半角の<>が含まれているとき、ストリーミング再生に失敗する #374

Chinachu · Dec 30, 2020 · 81b3692 · 81b3692
1 parent 9e41ab9
commit 81b3692
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 2 deletions.
diff --git a/api/script-recorded-program-watch.vm.js b/api/script-recorded-program-watch.vm.js
@@ -45,12 +45,17 @@ function main(avinfo) {
 			var prefix = request.query.prefix || '';
 
 			var target = prefix + 'watch.' + ext  + url.parse(request.url).search;
+			var title = program.title
+				.replace(/</g, "&lt;")
+				.replace(/>/g, "&gt;")
+				.replace(/&/g, "&amp;")
+				.replace(/"/g, "&quot;");
 
 			response.write('<?xml version="1.0" encoding="UTF-8"?>\n');
 			response.write('<playlist version="1" xmlns="http://xspf.org/ns/0/">\n');
 			response.write('<trackList>\n');
 			response.write('<track>\n<location>' + target.replace(/&/g, '&amp;') + '</location>\n');
-			response.write('<title>' + program.title + '</title>\n</track>\n');
+			response.write('<title>' + title + '</title>\n</track>\n');
 			response.write('</trackList>\n');
 			response.write('</playlist>\n');
 

diff --git a/api/script-recording-program-watch.vm.js b/api/script-recording-program-watch.vm.js
@@ -25,12 +25,17 @@
 			var prefix = request.query.prefix || '';
 
 			var target = prefix + 'watch.' + ext  + url.parse(request.url).search;
+			var title = program.title
+				.replace(/</g, "&lt;")
+				.replace(/>/g, "&gt;")
+				.replace(/&/g, "&amp;")
+				.replace(/"/g, "&quot;");
 
 			response.write('<?xml version="1.0" encoding="UTF-8"?>\n');
 			response.write('<playlist version="1" xmlns="http://xspf.org/ns/0/">\n');
 			response.write('<trackList>\n');
 			response.write('<track>\n<location>' + target.replace(/&/g, '&amp;') + '</location>\n');
-			response.write('<title>' + program.title + '</title>\n</track>\n');
+			response.write('<title>' + title + '</title>\n</track>\n');
 			response.write('</trackList>\n');
 			response.write('</playlist>\n');