From: paul <paul@plutz.net>
Date: Sat, 12 May 2018 23:51:47 +0000 (+0000)
Subject: properly escape link urls
X-Git-Url: https://git.plutz.net/?a=commitdiff_plain;h=f4c4e153c96212279fac9dd8eae13c76ea62be3c;p=serve0

properly escape link urls

svn path=/trunk/; revision=197
---

diff --git a/templates/view.html.sh b/templates/view.html.sh
index c0a4119..b2c48db 100755
--- a/templates/view.html.sh
+++ b/templates/view.html.sh
@@ -44,11 +44,11 @@ cat <<EOF
 
 
 <div id="videoview">
-  <h1>$info</h1>
+  <h1>$(htmlsafe "$info")</h1>
 
-  <a href="$video">Download</a>
+  <a href="$(urlsafe "$video")">Download</a>
   <video autoplay controls>
-    <source src="$video" type='video/mp4; codecs="avc1.4D401E, mp3"'>"
+    <source src="$(urlsafe "$video")" type='video/mp4; codecs="avc1.4D401E, mp3"'>"
   </video>
 
   <span class="info length">$(printf "%d:%02d min" $(($length / 60)) $(($length % 60)) )</span>