[SECURITY] Properly escape videoId for YouTube/Vimeo 92/59092/2
authorSusanne Moog <s.moog@neusta.de>
Tue, 11 Dec 2018 09:56:04 +0000 (10:56 +0100)
committerOliver Hader <oliver.hader@typo3.org>
Tue, 11 Dec 2018 09:56:06 +0000 (10:56 +0100)
commitc9174937802581bfecfaa788512a4f6e5cf8e9c7
tree08bf03b82ed7ea65256c5bb3eeffe5dc4acc77d8
parent4d6833a6175690cc8e56477061450e584779bf14
[SECURITY] Properly escape videoId for YouTube/Vimeo

Resolves: #83184
Releases: master, 8.7, 7.6
Security-Commit: 20b6cff301205505b620bffb5be4807636b014e7
Security-Bulletin: TYPO3-CORE-SA-2018-006
Change-Id: Ifb6b7588c7a06ca29a7c2a6382f95bbfb52f392e
Reviewed-on: https://review.typo3.org/59092
Reviewed-by: Oliver Hader <oliver.hader@typo3.org>
Tested-by: Oliver Hader <oliver.hader@typo3.org>
typo3/sysext/core/Classes/Resource/OnlineMedia/Helpers/VimeoHelper.php
typo3/sysext/core/Classes/Resource/OnlineMedia/Helpers/YouTubeHelper.php
typo3/sysext/core/Classes/Resource/Rendering/VimeoRenderer.php
typo3/sysext/core/Classes/Resource/Rendering/YouTubeRenderer.php
typo3/sysext/core/Tests/Unit/Resource/Rendering/VimeoRendererTest.php
typo3/sysext/core/Tests/Unit/Resource/Rendering/YouTubeRendererTest.php