From 58a6c5ace1628c6e6d9c817d46f3fd21bbe02334 Mon Sep 17 00:00:00 2001
From: Lauren Liberda <laura@selfisekai.rocks>
Date: Wed, 23 Jun 2021 00:37:19 +0200
Subject: [PATCH] html_encode meta variables

---
 webroot/watch.shs | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/webroot/watch.shs b/webroot/watch.shs
index 3787c39..4dd00ab 100755
--- a/webroot/watch.shs
+++ b/webroot/watch.shs
@@ -82,7 +82,7 @@ if [[ "${get_data[v]}" ]]; then
 			meta[title]="${strings[title]}"
 			meta[description]="$(jq -r '.description' <<< "$video")"
 			meta[unsafe]="
-			<meta property='og:image' content='https://i.ytimg.com/vi/${get_data[v]}/hqdefault.jpg'>
+			<meta property='og:image' content='https://i.ytimg.com/vi/$(html_encode "${get_data[v]}")/hqdefault.jpg'>
 			<meta property='og:type' content='video.other'>
 			<meta property='video:duration' content='$(jq -r '.duration' <<< "$video")'>
 			"'<script type="application/ld+json">'"$(jq '{
@@ -93,7 +93,7 @@ if [[ "${get_data[v]}" ]]; then
 				"description": .description,
 				"thumbnail": .thumbnails[-1].url,
 				"duration": ("PT" + (.duration | tostring) + "S"),
-			}' <<< "$video")"'</script>'
+			}' <<< "$video" | sed 's/</\&#60;/g;s/>/\&#62;/g;')"'</script>'
 			source templates/head.sh
 		fi
 		formats=$(jq '.formats' <<< "$video")