From 856cb2d1b71f04de7ee457d0d001511f0dcb760a Mon Sep 17 00:00:00 2001
From: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
Date: Thu, 21 May 2020 15:46:53 +0200
Subject: [PATCH] Bug 20783: Add missing url filters

Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de>
Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io>

Signed-off-by: Hayley Mapley <hayleymapley@catalyst.net.nz>
---
 koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/detail.tt | 2 +-
 koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-detail.tt     | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/detail.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/detail.tt
index a81c7fd0a5..cb9a2807d6 100644
--- a/koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/detail.tt
+++ b/koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/detail.tt
@@ -726,7 +726,7 @@
             <p>
                 [% IF HTML5MediaSet.is_youtube %]
                     <iframe id="player" type="text/html" width="640" height="360"
-                        src="[% HTML5MediaSet.srcblock %]" frameborder="0"></iframe>
+                        src="[% HTML5MediaSet.srcblock | url %]" frameborder="0"></iframe>
                 [% ELSE %]
                   <[% HTML5MediaParent | html %] controls preload=none>
                     <[% HTML5MediaSet.child | html %] src="[% HTML5MediaSet.srcblock | url %]"[% HTML5MediaSet.typeblock | html %] />
diff --git a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-detail.tt b/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-detail.tt
index 3468e6beb2..23331cdb20 100644
--- a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-detail.tt
+++ b/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-detail.tt
@@ -1036,11 +1036,11 @@
                                 <p>
                                     [% IF HTML5MediaSet.is_youtube %]
                                         <iframe id="player" type="text/html" width="640" height="360"
-                                            src="[% HTML5MediaSet.srcblock %]" frameborder="0"></iframe>
+                                            src="[% HTML5MediaSet.srcblock | url %]" frameborder="0"></iframe>
                                     [% ELSE %]
                                         [% SET ctrl_preload = ' controls preload=none' #translatability %]
                                         <[% HTML5MediaParent _ ctrl_preload | html %] >
-                                          <[% HTML5MediaSet.child | html %] src="[% HTML5MediaSet.srcblock | html %]" [% HTML5MediaSet.typeblock | html %] />
+                                          <[% HTML5MediaSet.child | html %] src="[% HTML5MediaSet.srcblock | url %]" [% HTML5MediaSet.typeblock | html %] />
                                           <span>[[% HTML5MediaParent | html %] tag not supported by your browser.]</span>
                                         </[% HTML5MediaParent | html %]>
                                     [% END %]
-- 
2.39.5