Permalink
Browse files

MDL-26030 fix js and attribute quoting

  • Loading branch information...
skodak committed Feb 12, 2011
1 parent eabab3d commit 8f81bfd412c6b2e93a5b15711727d5cb7cc78336
Showing with 3 additions and 3 deletions.
  1. +3 −3 filter/mediaplugin/filter.php
@@ -241,7 +241,7 @@ function mediaplugin_filter_flv_callback($link) {
'<span class="mediaplugin mediaplugin_flv" id="'.$id.'">('.get_string('flashvideo', 'mediaplugin').')</span>
<script type="text/javascript">
//<![CDATA[
- var FO = { movie:"'.$CFG->wwwroot.'/filter/mediaplugin/flvplayer.swf?file='.$url.'",
+ var FO = { movie:"'.$CFG->wwwroot.'/filter/mediaplugin/flvplayer.swf?file='.$jsurl.'",
width:"'.$width.'", height:"'.$height.'", majorversion:"6", build:"40",
allowscriptaccess:"never", quality: "high", allowfullscreen: "true" };
UFO.create(FO, "'.$id.'");
@@ -285,9 +285,9 @@ function mediaplugin_filter_real_callback($link, $autostart=false) {
*/
function mediaplugin_filter_youtube_callback($link, $autostart=false) {
- $site = addslashes_js($link[1]);
+ $site = s($link[1]);
$url = $link[2];
- $info = addslashes_js($link[3]);
+ $info = s($link[3]);
return '<span class="mediaplugin mediaplugin_youtube">'.
'<object title="'.$info.'"

0 comments on commit 8f81bfd

Please sign in to comment.