YT embed tweak (#6789)

* tweak css * fix typo * More tweak --------- Co-authored-by: Dan Abramov <[email protected]>
bluesky-social · Nov 27, 2024 · 29b3b3d · 29b3b3d
1 parent 47cbdfe
commit 29b3b3d
Showing 1 changed file with 10 additions and 2 deletions.
diff --git a/bskyweb/static/iframe/youtube.html b/bskyweb/static/iframe/youtube.html
@@ -27,13 +27,21 @@
 
   let player
   function onYouTubeIframeAPIReady() {
+    let videoId = url.searchParams.get('videoId')
+    videoId = decodeURIComponent(videoId)
+    videoId = videoId.replace(/[^a-zA-Z0-9_-]/g, "")
+    if (videoId.length !== 11) throw new Error("Invalid video ID")
+
+    let start = url.searchParams.get('start')
+    start = start.replace(/[^0-9]/g, "")
+
     player = new YT.Player('player', {
       width: "1000",
       height: "1000",
-      videoId: url.searchParams.get('videoId'),
+      videoId,
       playerVars: {
         autoplay: 1,
-        start: url.searchParams.get('start'),
+        start,
         rel: 0,
         loop: 0,
         playsinline: 1,