From 62e7dbe920b08a5a3de20a2dacc0bb1d1b20da51 Mon Sep 17 00:00:00 2001
From: Jeremy Mahieu <mahieujeremy@gmail.com>
Date: Wed, 22 Jul 2020 21:17:43 +0200
Subject: [PATCH] Omit getting script in oembed for twitter

---
 js/plugins.js | 10 +++-------
 1 file changed, 3 insertions(+), 7 deletions(-)

diff --git a/js/plugins.js b/js/plugins.js
index 9d76376..c36d8bf 100644
--- a/js/plugins.js
+++ b/js/plugins.js
@@ -515,16 +515,12 @@ plugins.factory('userPlugins', function() {
         var regexp = /^https?:\/\/twitter\.com\/(?:#!\/)?(\w+)\/status(?:es)?\/(\d+)/i;
         var match = url.match(regexp);
         if (match) {
-            url = 'https://api.twitter.com/1/statuses/oembed.json?id=' + match[2];
+            url = 'https://api.twitter.com/1/statuses/oembed.json?omit_script=true&id=' + match[2];
             return function() {
                 var element = this.getElement();
                 jsonp(url, function(data) {
-                    // separate the HTML into content and script tag
-                    var scriptIndex = data.html.indexOf("<script ");
-                    var content = data.html.substr(0, scriptIndex);
                     // Set DNT (Do Not Track)
-                    content = content.replace("<blockquote class=\"twitter-tweet\">", "<blockquote class=\"twitter-tweet\" data-dnt=\"true\">");
-                    element.innerHTML = content;
+                    element.innerHTML = data.html.replace("<blockquote class=\"twitter-tweet\">", "<blockquote class=\"twitter-tweet\" data-dnt=\"true\">");
 
                     // The script tag needs to be generated manually or the browser won't load it
                     var scriptElem = document.createElement('script');
@@ -569,7 +565,7 @@ plugins.factory('userPlugins', function() {
                 fetch("https://www.tiktok.com/oembed?url=" + url)
                 .then(function(response) {
                     return response.json();
-                    })
+                })
                 .then(function(data) {
                     // Separate the HTML into content and script tag
                     var scriptIndex = data.html.indexOf("<script ");