Merge pull request #1005 from FireMasterK/fix-escaping-xss

Fix for potential XSS attacks and formatting issues
TeamNewPipe · Jan 2, 2023 · 991394b · 991394b
2 parents ce15f7c + 01acf79
commit 991394b
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/...tor/src/main/java/org/schabi/newpipe/extractor/services/youtube/YoutubeParsingHelper.java b/...tor/src/main/java/org/schabi/newpipe/extractor/services/youtube/YoutubeParsingHelper.java
@@ -33,7 +33,7 @@
 import com.grack.nanojson.JsonParser;
 import com.grack.nanojson.JsonParserException;
 import com.grack.nanojson.JsonWriter;
-
+import org.jsoup.nodes.Entities;
 import org.schabi.newpipe.extractor.MetaInfo;
 import org.schabi.newpipe.extractor.downloader.Response;
 import org.schabi.newpipe.extractor.exceptions.AccountTerminatedException;
@@ -967,7 +967,7 @@ public static String getTextFromObject(final JsonObject textObject, final boolea
                     textBuilder.append("<s>");
                 }
 
-                textBuilder.append(text);
+                textBuilder.append(Entities.escape(text));
 
                 if (strikethrough) {
                     textBuilder.append("</s>");