116116 <?php
117117 function getOption ($ name , $ default = null )
118118 {
119- return isset ($ _GET ['options ' ][$ name ]) ? $ _GET ['options ' ][$ name ] : $ default ;
119+ return htmlspecialchars ( isset ($ _GET ['options ' ][$ name ]) ? $ _GET ['options ' ][$ name ] : $ default, ENT_QUOTES , ' UTF-8 ' ) ;
120120 }
121121 function getResolverOption ($ name , $ default = null )
122122 {
@@ -139,6 +139,7 @@ function getResolverOption($name, $default = null)
139139 <label><span>Facebook access token:</span> <input type="text" name="options[facebookAccessToken]" value="<?php echo getOption ('facebookAccessToken ' ); ?> "></label>
140140 <label><span>Embedly key:</span> <input type="text" name="options[embedlyKey]" value="<?php echo getOption ('embedlyKey ' ); ?> "></label>
141141 <label><span>Soundcloud client id:</span> <input type="text" name="options[soundcloudClientId]" value="<?php echo getOption ('soundcloudClientId ' , 'YOUR_CLIENT_ID ' ); ?> "></label>
142+ <label><span>oEmbed extra Parameters (in json format):</span> <input type="text" name="options[oembedParameters]" value="<?php echo getOption ('oembedParameters ' ); ?> "></label>
142143 </fieldset>
143144 <fieldset class="options">
144145 <h2>Request resolver options:</h2>
@@ -161,6 +162,11 @@ function getResolverOption($name, $default = null)
161162 <section>
162163 <?php
163164 $ options = isset ($ _GET ['options ' ]) ? (array ) $ _GET ['options ' ] : array ();
165+
166+ if (isset ($ options ['oembedParameters ' ])) {
167+ $ options ['oembedParameters ' ] = $ options ['oembedParameters ' ] ? json_decode ($ options ['oembedParameters ' ], true ) : array ();
168+ }
169+
164170 $ resolverOptions = isset ($ _GET ['resolver ' ]) ? (array ) $ _GET ['resolver ' ] : array ();
165171
166172 Embed \Request::setResolverConfig ($ resolverOptions );
@@ -220,7 +226,10 @@ function getResolverOption($name, $default = null)
220226 </tr>
221227 <tr>
222228 <th>Embed code</th>
223- <td><?php echo $ info ->code ; ?> </td>
229+ <td>
230+ <?php echo $ info ->code ; ?>
231+ <pre><?php echo htmlspecialchars ($ info ->code , ENT_IGNORE ); ?> </pre>
232+ </td>
224233 </tr>
225234 <tr>
226235 <th>Url</th>
0 commit comments