XF 2.2 Unescaped HTML $id in BBCode?

[bottiger]

I just migrated from Xenforo 1.5 to 2.2. I have a video bbcode that looks like this, but the {$id} now outputs escaped HTML, causing it to not work.

#^(?P<id>https?://.+\.(mp4|webm))$#

<video src="{$id}" controls preload="metadata" style="max-width:100%;height:auto"></video>


How do I output unescape HTML in {$id}?

 

[bottiger]

Never mind, fixed it with a php callback.

 

[nocte]

try {$id|raw}.

 

[nocte]

How do I output unescape HTML in {$id}?

P.S. in order to avoid XSS you may want to change your Regex.

 

[bottiger]

P.S. in order to avoid XSS you may want to change your Regex.

Hey yeah you're right, the regex needs to be more strict, can't believe I didn't realize this. Maybe just block quotes from being in the url.