mirrors/jellyfin-web
1
0
Fork 0
mirror of https://github.com/jellyfin/jellyfin-web synced 2025-03-30 19:56:21 +00:00
Code Activity

Backport pull request #4243 from jellyfin/release-10.8.z

Browse source 
Fix HTML escaping in MediaSession and on remote page

Original-merge: ae907cd8a6

Merged-by: Bill Thornton <thornbill@users.noreply.github.com>

Backported-by: Joshua M. Boniface <joshua@boniface.me>
This commit is contained in:
Dmitry Lyzo 2023-01-22 14:07:08 -05:00 • committed by Joshua M. Boniface
parent 7f30d82d17
commit 5e6de2d7db
2 changed files with 4 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

4
src/components/nowPlayingBar/nowPlayingBar.js
View file

@ -500,14 +500,14 @@ import { appRouter } from '../appRouter';
textLines[1].secondary = true;
if (textLines[1].text) {
const text = document.createElement('a');
text.innerHTML = textLines[1].text;
text.innerText = textLines[1].text;
secondaryText.appendChild(text);
}
}
if (textLines[0].text) {
const text = document.createElement('a');
text.innerHTML = textLines[0].text;
text.innerText = textLines[0].text;
itemText.appendChild(text);
}
nowPlayingTextElement.appendChild(itemText);

6
src/components/playback/nowplayinghelper.js
View file

@ -1,5 +1,3 @@
import escapeHtml from 'escape-html';
export function getNowPlayingNames(nowPlayingItem, includeNonNameInfo) {
let topItem = nowPlayingItem;
let bottomItem = null;
@ -61,13 +59,13 @@ export function getNowPlayingNames(nowPlayingItem, includeNonNameInfo) {
const list = [];
list.push({
text: escapeHtml(topText),
text: topText,
item: topItem
});
if (bottomText) {
list.push({
text: escapeHtml(bottomText),
text: bottomText,
item: bottomItem
});
}