fix: load markdown in direct.php, allow video-channels, guard modals

This commit is contained in:
2026-07-27 01:54:34 +04:00
parent 9b460a2550
commit 442c262539
5 changed files with 227 additions and 83 deletions
+13 -6
View File
@@ -9,6 +9,8 @@ if (defined('COUNTDOWN_ENABLED') && COUNTDOWN_ENABLED === true) {
exit;
}
// Inclure le convertisseur Markdown
require_once 'includes/lib/markdown.php';
// Inclure les fonctions de données structurées
require_once 'includes/structured-data.php';
// Appliquer les en-têtes de sécurité
@@ -126,9 +128,9 @@ $liveStream = getLiveStream();
<i class="fas fa-circle"></i> EN DIRECT
</div>
<div class="live-player">
<iframe
src="<?php echo PEERTUBE_URL; ?>/videos/embed/<?php echo $liveStream['id']; ?>?autoplay=1"
frameborder="0"
<iframe
src="<?php echo e(PEERTUBE_URL . '/videos/embed/' . $liveStream['id'] . '?autoplay=1'); ?>"
frameborder="0"
allowfullscreen="allowfullscreen"
allow="autoplay; fullscreen"
title="<?php echo htmlspecialchars($liveStream['title']); ?>">
@@ -142,9 +144,9 @@ $liveStream = getLiveStream();
<i class="fas fa-user-circle"></i>
</div>
<?php else: ?>
<img src="<?php echo $liveStream['channelAvatar']; ?>" alt="<?php echo $liveStream['channel']; ?>" class="channel-avatar">
<img src="<?php echo e($liveStream['channelAvatar']); ?>" alt="<?php echo e($liveStream['channel']); ?>" class="channel-avatar">
<?php endif; ?>
<span class="channel-name"><?php echo $liveStream['channel']; ?></span>
<span class="channel-name"><?php echo e($liveStream['channel']); ?></span>
</div>
<?php if (!empty($liveStream['description'])): ?>
<div class="live-description">
@@ -165,7 +167,12 @@ $liveStream = getLiveStream();
$bgImageStyle = 'background-image: url(\'' . htmlspecialchars(NEXT_LIVE_IMAGE) . '\');';
}
?>
<div class="next-live-announcement" style="<?php echo $bgImageStyle; ?>" nonce="<?php echo getCspNonce(); ?>">
<?php if (!empty($bgImageStyle)): ?>
<style nonce="<?php echo getCspNonce(); ?>">
.next-live-announcement { <?php echo $bgImageStyle; ?> }
</style>
<?php endif; ?>
<div class="next-live-announcement">
<?php if (!empty(NEXT_LIVE_IMAGE) && file_exists(NEXT_LIVE_IMAGE)): ?>
<div class="next-live-image-container">
<img src="<?php echo htmlspecialchars(NEXT_LIVE_IMAGE); ?>"