Merge branch 'patch/v1.5.x'

* patch/v1.5.x:
  Make sure `reduceMaxBufferLength` can reach a min length of fragment duration resulting in buffer full error (#6539)
  Fix parsing of multiple codecs when converting from AVC1 to AVCOTI
  Fix XSS vulnerability by validating user input stream URL.

src/controller/base-stream-controller.ts

@@ -1161,12 +1161,13 @@ export default class BaseStreamController
   protected reduceMaxBufferLength(threshold: number, fragDuration: number) {
     const config = this.config;
     const minLength = Math.max(
-      Math.min(threshold, config.maxBufferLength),
+      Math.min(threshold - fragDuration, config.maxBufferLength),
       fragDuration,
     );
     const reducedLength = Math.max(
       threshold - fragDuration * 3,
       config.maxMaxBufferLength / 2,
+      minLength,
     );
     if (reducedLength >= minLength) {
       // reduce max buffer length as it might be too high. we do this to avoid loop flushing ...