be-gay-do-crimes
/
NewPipeExtractor
mirror of https://github.com/TeamNewPipe/NewPipeExtractor
1
0
Fork 0
Code Issues Releases Wiki Activity

Merge pull request #1005 from FireMasterK/fix-escaping-xss 

Fix for potential XSS attacks and formatting issues
This commit is contained in:
Stypox 2023-01-02 15:06:17 +01:00 committed by GitHub
parent ce15f7cc50 01acf79436
commit 991394b53a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
extractor/src/main/java/org/schabi/newpipe/extractor/services/youtube/YoutubeParsingHelper.java
View File

@ -33,7 +33,7 @@ import com.grack.nanojson.JsonObject;
import com.grack.nanojson.JsonParser;
import com.grack.nanojson.JsonParserException;
import com.grack.nanojson.JsonWriter;
import org.jsoup.nodes.Entities;
import org.schabi.newpipe.extractor.MetaInfo;
import org.schabi.newpipe.extractor.downloader.Response;
import org.schabi.newpipe.extractor.exceptions.AccountTerminatedException;
@ -967,7 +967,7 @@ public final class YoutubeParsingHelper {
textBuilder.append("<s>");
}
textBuilder.append(text);
textBuilder.append(Entities.escape(text));
if (strikethrough) {
textBuilder.append("</s>");