More sanitization

owncloud-archive · May 10, 2016 · bc47e3a · bc47e3a
1 parent efdf773
commit bc47e3a
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/files_videoviewer/js/viewer.js b/files_videoviewer/js/viewer.js
@@ -12,9 +12,9 @@ var videoViewer = {
 			$('#box-close').click(videoViewer.hidePlayer);
 			var size = videoViewer.UI.getSize();
 			var playerView = videoViewer.UI.playerTemplate.replace(/%width%/g, size.width)
-								.replace(/%height%/g, size.height)
-								.replace(/%type%/g, videoViewer.mime)
-								.replace(/%src%/g, videoViewer.location)
+								.replace(/%height%/g, escapeHTML(size.height))
+								.replace(/%type%/g, escapeHTML(videoViewer.mime))
+								.replace(/%src%/g, escapeHTML(videoViewer.location))
 			;
 			$(playerView).prependTo('#videoviewer_container');
 		},