VeritableValor/invidious
1
0
Fork 0
mirror of https://github.com/iv-org/invidious.git synced 2026-09-06 17:12:45 -05:00
Code Issues Packages Projects Releases Wiki Activity

Avoid double-escaping custom emoji fallback

Browse Source
This commit is contained in:
andrzejber 2026-08-07 22:55:52 +02:00
parent ce80b5e42c
commit 7bad4c1ebc
1 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
src/invidious/videos/description.cr
View File

@ -59,14 +59,18 @@ private def render_description_attachment(attachment : JSON::Any, fallback : Str
# same request path through yt3.ggpht.com. # same request path through yt3.ggpht.com.
return unless {"lh3.googleusercontent.com", "yt3.ggpht.com"}.includes?(uri.host) return unless {"lh3.googleusercontent.com", "yt3.ggpht.com"}.includes?(uri.host)
label = attachment.dig?("properties", "accessibilityProperties", "label").try &.as_s? || fallback label = if raw_label = attachment.dig?("properties", "accessibilityProperties", "label").try &.as_s?
HTML.escape(raw_label)
else
fallback
end
width = source["width"]?.try &.as_i? || 16_i64 width = source["width"]?.try &.as_i? || 16_i64
height = source["height"]?.try &.as_i? || 16_i64 height = source["height"]?.try &.as_i? || 16_i64
String.build do |str| String.build do |str|
str << %(<img alt=") << HTML.escape(label) << %(" ) str << %(<img alt=") << label << %(" )
str << %(src="/ggpht) << HTML.escape(uri.request_target) << %(" ) str << %(src="/ggpht) << HTML.escape(uri.request_target) << %(" )
str << %(title=") << HTML.escape(label) << %(" ) str << %(title=") << label << %(" )
str << %(width=") << width << %(" ) str << %(width=") << width << %(" )
str << %(height=") << height << %(" ) str << %(height=") << height << %(" )
str << %(class="channel-emoji" />) str << %(class="channel-emoji" />)