refactor: fix xss PROD-2305

2021-04-15 20:11:04 +05:00
parent 9e66979945
commit 643d5211ca
1 changed files with 2 additions and 2 deletions
--- a/common/lib/xmodule/xmodule/js/src/video/09_poster.js
+++ b/common/lib/xmodule/xmodule/js/src/video/09_poster.js
@@ -23,8 +23,8 @@
        VideoPoster.moduleName = 'Poster';
        VideoPoster.prototype = {
            template: _.template([
-                '<div class="video-pre-roll is-<%= type %> poster" ',
-                'style="background-image: url(<%= url %>)">',
+                '<div class="video-pre-roll is-<%- type %> poster" ',
+                'style="background-image: url(<%- url %>)">',
                '<button class="btn-play btn-pre-roll">',
                '<img src="/static/images/play.png" alt="">',
                '<span class="sr">', gettext('Play video'), '</span>',