lib/onebox/engine/sketchfab_onebox.rb in onebox-1.7.3 vs lib/onebox/engine/sketchfab_onebox.rb in onebox-1.7.4

@@ -9,13 +9,14 @@
 
       def to_html
         opengraph = get_opengraph
 
         src = opengraph[:video_url].gsub("?autostart=1", "")
+        escaped_src = ::Onebox::Helpers.normalize_url_for_output(src)
 
         <<-HTML
-          <iframe src="#{src}"
+          <iframe src="#{escaped_src}"
                   width="#{opengraph[:video_width]}"
                   height="#{opengraph[:video_height]}"
                   scrolling="no"
                   frameborder="0"
                   allowfullscreen>
@@ -23,10 +24,11 @@
         HTML
       end
 
       def placeholder_html
         opengraph = get_opengraph
-        "<img src='#{opengraph[:image]}'>"
+        escaped_src = ::Onebox::Helpers.normalize_url_for_output(opengraph[:image])
+        "<img src='#{escaped_src}'>"
       end
 
     end
   end
 end