diff --git a/src/invidious/views/embed.ecr b/src/invidious/views/embed.ecr index b23917db..315d06af 100644 --- a/src/invidious/views/embed.ecr +++ b/src/invidious/views/embed.ecr @@ -14,7 +14,7 @@ -<%= video.title %> - Invidious +<%= HTML.escape(video.title) %> - Invidious @@ -82,7 +82,7 @@ var shareOptions = { socials: ["fb", "tw", "reddit", "mail"], url: "<%= host_url %>/<%= video.id %>?<%= host_params %>", - title: "<%= video.title %>", + title: "<%= HTML.escape(video.title) %>", description: "<%= description %>", image: '<%= thumbnail %>', embedCode: `