fix(FEC-10103): escape quotes with htmlspecialchars() (#4159)

kaltura · May 27, 2020 · 6bdbd67 · 6bdbd67
1 parent c402f6e
commit 6bdbd67
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/mwEmbedLoader.php b/mwEmbedLoader.php
@@ -105,7 +105,7 @@ function output(){
 
 		// check for non-fatal errors: 
 		if( $this->getError() ){
-			echo "if( console ){ console.log('" . json_encode($this->getError()) . "'); }";
+			echo "if( console ){ console.log('" . json_encode(htmlspecialchars( is_string($this->getError()) ? $this->getError() : json_encode($this->getError()), ENT_QUOTES)) . "'); }";
 		}
 		// output the script output
 		echo $o;