bashtube/webroot/search.shs
Dominika Liberda 14b7bf2628 - XSS in search
2021-02-18 00:21:25 +01:00

40 lines
1.1 KiB
Bash
Executable file

#!/bin/bash
meta[title]="youtube but not really"
source templates/head.sh
if [[ "${get_data[q]}" ]]; then
query="${get_data[q]}"
query_nice=$(sed -s 's/+/ /g' <<< "${get_data[q]}")
echo "<form action='/search.shs'>
<input name='q' type='text' value='$(html_encode "$query_nice")'>"
else
echo "<form action='/search.shs'>
<input name='q' type='text'>"
fi
echo "<input type='submit' value='Search'>
</form><br>"
if [[ "${get_data[q]}" ]]; then
data=$(haruhi-dl "ytsearch30:${get_data[q]}" --flat-playlist -J | jq '.entries[]')
IFS=$'\n'
id=($(jq -r '.id' <<< "$data"))
title=($(jq -r '.title' <<< "$data"))
runtime=($(jq -r '.duration' <<< "$data"))
views=($(jq -r '.view_count' <<< "$data"))
channel=($(jq -r '.channel' <<< "$data"))
channel_id=($(jq -r '.channel_id' <<< "$data"))
unset IFS
for (( i=0; i<${#id[@]}; i++ )); do
echo "<a href='/watch.shs?v=${id[$i]}'><img src='https://i.ytimg.com/vi/${id[$i]}/mqdefault.jpg'><br>${title[$i]}</a> | ${runtime[$i]} seconds | ${views[$i]} views<br>Uploaded by <a href='/channel.shs?id=${channel_id[$i]}'>${channel[$i]}</a><br>"
done
else
echo "search for something will 'ya?"
fi