RSS Feed/News Unlisted Vimeo videos lose their private hash when embedded

Status
Not open for further replies.

ENXF NET

Administrator
Staff member
Administrator
Moderator
+Lifetime VIP+
S.V.I.P.S Member
S.V.I.P Member
V.I.P Member
Collaborate
Registered
Joined
Nov 13, 2018
Messages
33,628
Points
823

Reputation:

Since 2.2.12, embedding an unlisted Vimeo video (https://vimeo.com/<id>/<hash>) renders a player URL without its ?h=<hash> parameter, so the video doesn't play.

XF\BbCode\Helper\Vimeo::htmlCallback() decides whether each part of the media key is a start time with preg_match('/[0-9]+/', $info), which isn't anchored. A private hash almost always contains a digit, so it's taken as the start time: the iframe gets #t=<hash>s and no ?h=. This was introduced...

Read more

Continue reading...
 
Status
Not open for further replies.
Top