Merge 31b6ed96025bcaa1c6f7aaf9c12efd1e1b0707a8 into 5cfe294063c9317928d8da3387004e3eaddc991a

This commit is contained in:
Samantaz Fox 2025-10-19 16:50:03 +08:00 committed by GitHub
commit dc3b54fac1
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -32,7 +32,7 @@ module Invidious::Frontend::WatchPage
return String.build(4000) do |str|
str << "<form"
str << " class=\"pure-form pure-form-stacked\""
str << " action='#{url}'"
str << " action='" << HTML.escape(url) << "'"
str << " method='post'"
str << " rel='noopener noreferrer'"
str << " target='_blank'>"