2
0
mirror of https://github.com/TeamNewPipe/NewPipeExtractor synced 2025-08-31 06:15:37 +00:00

Fix for potential XSS attacks.

This commit is contained in:
Kavin
2022-12-31 20:05:32 +00:00
parent f45966d449
commit 01acf79436

View File

@@ -33,7 +33,7 @@ import com.grack.nanojson.JsonObject;
import com.grack.nanojson.JsonParser;
import com.grack.nanojson.JsonParserException;
import com.grack.nanojson.JsonWriter;
import org.jsoup.nodes.Entities;
import org.schabi.newpipe.extractor.MetaInfo;
import org.schabi.newpipe.extractor.downloader.Response;
import org.schabi.newpipe.extractor.exceptions.AccountTerminatedException;
@@ -967,7 +967,7 @@ public final class YoutubeParsingHelper {
textBuilder.append("<s>");
}
textBuilder.append(text);
textBuilder.append(Entities.escape(text));
if (strikethrough) {
textBuilder.append("</s>");