a/sites/all/modules/contrib/jw_player/jw_player.admin. Last time I tried to attach the patch as an attachment, it didn't work, but I'm trying again as embedded PHP: diff -git a/sites/all/modules/contrib/jw_player/jw_ b/sites/all/modules/contrib/jw_player/jw_ I created a patch to address the issue not quite sure whether I've got it right. Using some experiments, I verified that the key is not validated, and thus together with the lack of quotes/escapes, this is a security issue (really, minor, since an administrator breaking into his own site seems strange). Some options, like width or mute, are top level, while other more advanced options may be nested, such as the. JW Player contains a number of configurable options. There’s a JW Player for Every Business Grow your audience engagement and boost your video revenue. Please contact our team if your license does not support the features or configuration options you need. We have a user report of videos failing to load on our site, that uses a premium license key for JwPlayer 6 - this is not widespread, and does not show up. Using FireBug, I verified that the key is not quote enclosed, and also doesn't do any escaping. Certain JW Player features may require a specific license. I entered our present key, and it did not work. On our current CMS, our key is enclosed in double quotes, without any escaping.
0 Comments
Leave a Reply. |