From f8169e9275e463a0cf1d39d947bfaf719575e908 Mon Sep 17 00:00:00 2001
From: Victor Costa <vfcosta@gmail.com>
Date: Wed, 29 Oct 2014 17:35:36 -0300
Subject: [PATCH] video_plugin: fix html escape

---
 plugins/video/views/content_viewer/_video.html.erb | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugins/video/views/content_viewer/_video.html.erb b/plugins/video/views/content_viewer/_video.html.erb
index 6bbda38..513ed05 100644
--- a/plugins/video/views/content_viewer/_video.html.erb
+++ b/plugins/video/views/content_viewer/_video.html.erb
@@ -3,7 +3,7 @@
   <link type="text/css" rel="stylesheet" href="https://vjs.zencdn.net/4.5.1/video-js.css" />
   <video id="embedded_video" src="" class="video-js vjs-default-skin vjs-big-play-centered" controls preload="auto" 
     width="<%= @page.fitted_width %>" height="<%= @page.fitted_height %>"
-    data-setup='{ "techOrder": ["youtube"], "src": "<%= @page.video_url %>" }'>
+    data-setup='<%=CGI::escapeHTML("{ \"techOrder\": [\"youtube\"], \"src\": \"#{@page.video_url}\" }") %>'>
     <%= @page.no_browser_support_message %>
   </video>
   <script src="https://vjs.zencdn.net/4.5.1/video.js"></script>
@@ -12,7 +12,7 @@
   <link type="text/css" rel="stylesheet" href="https://vjs.zencdn.net/4.5.1/video-js.css" />
   <video id="embedded_video" src="" class="video-js vjs-default-skin vjs-big-play-centered" controls preload="auto" 
     width="<%= @page.fitted_width %>" height="<%= @page.fitted_height %>"  
-    data-setup='{ "techOrder": ["vimeo"], "src": "<%= @page.video_url %>", "loop": true, "autoplay": false }'>
+    data-setup='<%=CGI::escapeHTML("{ \"techOrder\": [\"video\"], \"src\": \"#{@page.video_url}\", \"loop\": true, \"autoplay\": false  }") %>'>
     <%= @page.no_browser_support_message %>
   </video>
   <script src="https://vjs.zencdn.net/4.5.1/video.js"></script>
@@ -31,4 +31,4 @@
 <br style="clear:both" />
 </div>
 <% _("Description:") %>
-<%= @page.body %>
\ No newline at end of file
+<%= @page.body %>
--
libgit2 0.21.2