From e5ae99f2568a4fcf44b1cb8d2d776f489b1f4d87 Mon Sep 17 00:00:00 2001
From: Pierre Rudloff <contact@rudloff.pro>
Date: Tue, 30 Dec 2014 00:33:09 +0100
Subject: [PATCH] Valid HTML

---
 api.php | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/api.php b/api.php
index 99b82c6..612c916 100644
--- a/api.php
+++ b/api.php
@@ -36,7 +36,7 @@ if (isset($_GET["url"])) {
             <p>You are going to download<i itemprop="name">
                 <a itemprop="url" id="video_link"
                     data-ext="<?php echo $video->ext; ?>"
-                    data-video="<?php echo $video->url; ?>"
+                    data-video="<?php echo htmlentities($video->url); ?>"
                     href="<?php echo $video->webpage_url; ?>">
             <?php
             echo $video->title;
@@ -67,14 +67,16 @@ if (isset($_GET["url"])) {
                 <?php
                 echo '<li class="best" itemprop="encoding" itemscope
                 itemtype="http://schema.org/VideoObject">';
-                echo '<a itemprop="contentUrl" href="', $video->url ,'">';
+                echo '<a itemprop="contentUrl"
+                    href="', htmlentities($video->url) ,'">';
                 echo '<b>Best</b> (<span itemprop="encodingFormat">', 
                     $video->ext, '</span>)';
                 echo '</a></li>';
                 foreach ($video->formats as $format) {
                     echo '<li itemprop="encoding"
                         itemscope itemtype="http://schema.org/VideoObject">';
-                    echo '<a itemprop="contentUrl" href="', $format->url ,'">';
+                    echo '<a itemprop="contentUrl"
+                        href="', htmlentities($format->url) ,'">';
                     echo '<span itemprop="videoQuality">', $format->format,
                         '</span> (<span itemprop="encodingFormat">', 
                         $format->ext, '</span>)';