Fix XSS issue

peertube-plugin-video-annotation/scripts/build.sh

@@ -0,0 +1,7 @@
+#!/bib/sh
+
+rm -rf ./dist ./assets/videojs-overlay.css
+
+node ./scripts/esbuild.js
+
+cp ./node_modules/videojs-overlay/dist/videojs-overlay.css ./assets/videojs-overlay.css

peertube-plugin-video-annotation/scripts/esbuild.js

@@ -0,0 +1,19 @@
+const esbuild = require('esbuild')
+const { externalGlobalPlugin } = require('esbuild-plugin-external-global')
+
+for (const file of [ 'embed-client-plugin.js', 'video-edit-client-plugin.js', 'video-watch-client-plugin.js' ]) {
+  esbuild.build({
+    entryPoints: [ 'client/' + file ],
+    bundle: true,
+    minify: false,
+    format: 'esm',
+    outfile: 'dist/' + file,
+    target: [ 'safari11' ],
+
+    plugins: [
+      externalGlobalPlugin({
+        'video.js': 'window.videojs'
+      })
+    ]
+  })
+}