[brightcove:legacy] restrict videoPlayer value(closes #12040)

This commit is contained in:
Remita Amine 2017-02-18 21:07:09 +01:00
parent ac33accd96
commit 049a0f4d6d

View file

@ -191,6 +191,10 @@ def find_param(name):
# These fields hold the id of the video
videoPlayer = find_param('@videoPlayer') or find_param('videoId') or find_param('videoID') or find_param('@videoList')
if videoPlayer is not None:
if isinstance(videoPlayer, list):
videoPlayer = videoPlayer[0]
if not (videoPlayer.isdigit() or videoPlayer.startswith('ref:')):
return None
params['@videoPlayer'] = videoPlayer
linkBase = find_param('linkBaseURL')
if linkBase is not None: