116
116
<?php
117
117
function getOption ($ name , $ default = null )
118
118
{
119
- return isset ($ _GET ['options ' ][$ name ]) ? $ _GET ['options ' ][$ name ] : $ default ;
119
+ return htmlspecialchars ( isset ($ _GET ['options ' ][$ name ]) ? $ _GET ['options ' ][$ name ] : $ default, ENT_QUOTES , ' UTF-8 ' ) ;
120
120
}
121
121
function getResolverOption ($ name , $ default = null )
122
122
{
@@ -139,6 +139,7 @@ function getResolverOption($name, $default = null)
139
139
<label><span>Facebook access token:</span> <input type="text" name="options[facebookAccessToken]" value="<?php echo getOption ('facebookAccessToken ' ); ?> "></label>
140
140
<label><span>Embedly key:</span> <input type="text" name="options[embedlyKey]" value="<?php echo getOption ('embedlyKey ' ); ?> "></label>
141
141
<label><span>Soundcloud client id:</span> <input type="text" name="options[soundcloudClientId]" value="<?php echo getOption ('soundcloudClientId ' , 'YOUR_CLIENT_ID ' ); ?> "></label>
142
+ <label><span>oEmbed extra Parameters (in json format):</span> <input type="text" name="options[oembedParameters]" value="<?php echo getOption ('oembedParameters ' ); ?> "></label>
142
143
</fieldset>
143
144
<fieldset class="options">
144
145
<h2>Request resolver options:</h2>
@@ -161,6 +162,11 @@ function getResolverOption($name, $default = null)
161
162
<section>
162
163
<?php
163
164
$ options = isset ($ _GET ['options ' ]) ? (array ) $ _GET ['options ' ] : array ();
165
+
166
+ if (isset ($ options ['oembedParameters ' ])) {
167
+ $ options ['oembedParameters ' ] = $ options ['oembedParameters ' ] ? json_decode ($ options ['oembedParameters ' ], true ) : array ();
168
+ }
169
+
164
170
$ resolverOptions = isset ($ _GET ['resolver ' ]) ? (array ) $ _GET ['resolver ' ] : array ();
165
171
166
172
Embed \Request::setResolverConfig ($ resolverOptions );
@@ -220,7 +226,10 @@ function getResolverOption($name, $default = null)
220
226
</tr>
221
227
<tr>
222
228
<th>Embed code</th>
223
- <td><?php echo $ info ->code ; ?> </td>
229
+ <td>
230
+ <?php echo $ info ->code ; ?>
231
+ <pre><?php echo htmlspecialchars ($ info ->code , ENT_IGNORE ); ?> </pre>
232
+ </td>
224
233
</tr>
225
234
<tr>
226
235
<th>Url</th>
0 commit comments