[SECURITY] Properly escape videoId for YouTube/Vimeo 84/59084/2
authorSusanne Moog <s.moog@neusta.de>
Tue, 11 Dec 2018 09:55:04 +0000 (10:55 +0100)
committerOliver Hader <oliver.hader@typo3.org>
Tue, 11 Dec 2018 09:55:06 +0000 (10:55 +0100)
commit20927adfb8aae0093508c904937e40114b92a90c
tree9515a7af7fd8ad51c9627b7db8574ae410a03bc2
parent4ad54629ddc8594ba3b29fb3b273add8dfc697ec
[SECURITY] Properly escape videoId for YouTube/Vimeo

Resolves: #83184
Releases: master, 8.7, 7.6
Security-Commit: 8da8a3c1609fbd83b025c8a815d9c3b667c7722c
Security-Bulletin: TYPO3-CORE-SA-2018-006
Change-Id: Iaab42d0c00d465582cb48fe473cc345c68144031
Reviewed-on: https://review.typo3.org/59084
Reviewed-by: Oliver Hader <oliver.hader@typo3.org>
Tested-by: Oliver Hader <oliver.hader@typo3.org>
typo3/sysext/core/Classes/Resource/OnlineMedia/Helpers/VimeoHelper.php
typo3/sysext/core/Classes/Resource/OnlineMedia/Helpers/YouTubeHelper.php
typo3/sysext/core/Classes/Resource/Rendering/VimeoRenderer.php
typo3/sysext/core/Classes/Resource/Rendering/YouTubeRenderer.php
typo3/sysext/core/Tests/Unit/Resource/Rendering/VimeoRendererTest.php
typo3/sysext/core/Tests/Unit/Resource/Rendering/YouTubeRendererTest.php