mirrors/jellyfin-web
1
0
Fork 0
mirror of https://github.com/jellyfin/jellyfin-web synced 2025-03-30 19:56:21 +00:00
Code Activity

Fix HTML escaping in MediaSession and on remote page

Browse source
This commit is contained in:
Dmitry Lyzo 2023-01-05 01:52:37 +03:00
parent 255df81375
commit 0ce839c4a8
2 changed files with 4 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

4
src/components/nowPlayingBar/nowPlayingBar.js
View file

@ -502,14 +502,14 @@ import { appRouter } from '../appRouter';
textLines[1].secondary = true;
if (textLines[1].text) {
const text = document.createElement('a');
text.innerHTML = textLines[1].text;
text.innerText = textLines[1].text;
secondaryText.appendChild(text);
}
}
if (textLines[0].text) {
const text = document.createElement('a');
text.innerHTML = textLines[0].text;
text.innerText = textLines[0].text;
itemText.appendChild(text);
}
nowPlayingTextElement.appendChild(itemText);

6
src/components/playback/nowplayinghelper.js
View file

@ -1,5 +1,3 @@
import escapeHtml from 'escape-html';
export function getNowPlayingNames(nowPlayingItem, includeNonNameInfo) {
let topItem = nowPlayingItem;
let bottomItem = null;
@ -61,13 +59,13 @@ export function getNowPlayingNames(nowPlayingItem, includeNonNameInfo) {
const list = [];
list.push({
text: escapeHtml(topText),
text: topText,
item: topItem
});
if (bottomText) {
list.push({
text: escapeHtml(bottomText),
text: bottomText,
item: bottomItem
});
}