optimized video thumbnail creation (#14472)

pimcore · Feb 27, 2023 · b9ba69f · b9ba69f
1 parent ee77e95
commit b9ba69f
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/bundles/AdminBundle/Controller/Admin/SettingsController.php b/bundles/AdminBundle/Controller/Admin/SettingsController.php
@@ -1554,7 +1554,7 @@ public function videoThumbnailUpdateAction(Request $request)
                 $type = $item['type'];
                 unset($item['type']);
 
-                $pipe->addItem($type, $item, $mediaName);
+                $pipe->addItem($type, $item, htmlspecialchars($mediaName));
             }
         }
 

diff --git a/bundles/AdminBundle/Resources/public/js/pimcore/settings/videothumbnail/item.js b/bundles/AdminBundle/Resources/public/js/pimcore/settings/videothumbnail/item.js
@@ -177,6 +177,7 @@ pimcore.settings.videothumbnail.item = Class.create({
     },
 
     addMediaPanel: function (name, items, closable, activate) {
+        name = name.replace(/[^a-zA-Z0-9_\-+]/g,'');
 
         if (this.medias[name]) {
             return;