Pasting a link in the composer's title field trims the title if there's a quote character in it

Bug
1

Try pasting these this link on try.discourse.org:

The link’s title is Timecop1983 - Let's Talk (feat. Josh Dally) _ Remaster but the generated title in Discourse will be Timecop1983 - Let:

9 Likes
2

It looks like the issue is at youtube_onebox.rb#45

The single-quote (') in the title isn’t html-escaped so it closes the attribute value early, which gets sanitized away

Edit: submitted a pull request

8 Likes
6

Merged, thank you for your contribution :meow_heart:

6 Likes