From 0d777d214ccb2c29727114fa39e53294fed3b4bc Mon Sep 17 00:00:00 2001
From: Rumperuu <admin@track.bengoldsworthy.net>
Date: Sun, 9 Jun 2024 22:29:37 +0200
Subject: [PATCH] use `secure_url()`

---
 resources/views/partials/checkins-list.blade.php | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/resources/views/partials/checkins-list.blade.php b/resources/views/partials/checkins-list.blade.php
index 8d30cf6..eb9d24f 100644
--- a/resources/views/partials/checkins-list.blade.php
+++ b/resources/views/partials/checkins-list.blade.php
@@ -11,11 +11,11 @@
                   $path = "/" . $trip_slug . "/" .$hasEmbed . "/" . $filepath[1];
 
                   $embed = '<video class="popup__video" controls>';
-                  $embed .= '<source src="' . url( $path ) . '" type="video/webm">';
-                  $embed .= '<p>Your client doesn\'t support HTML video. Here is a <a href="' . url( $path ) . '">link to the video</a> instead.</p>';
+                  $embed .= '<source src="' . secure_url( $path ) . '" type="video/webm">';
+                  $embed .= '<p>Your client doesn\'t support HTML video. Here is a <a href="' . secure_url( $path ) . '">link to the video</a> instead.</p>';
                   $embed .= '</video>'; 
                   if (isset($email)) {
-                    $embed .= '<p><i>If your email client doesn\'t support video embeds, here is a <a href="' . url( $path ) . '">link to the file</a> instead.</i></p>';
+                    $embed .= '<p><i>If your email client doesn\'t support video embeds, here is a <a href="' . secure_url( $path ) . '">link to the file</a> instead.</i></p>';
                   }
               } else {
                   $embed = '<p>[The video \'' . $filepath[1] . '\' has not yet been uploaded, try again later.]</p>';
@@ -28,11 +28,11 @@
                   $path = "/" . $trip_slug . "/" .$hasEmbed . "/" . $filepath[1];
 
                   $embed = '<audio class="popup__audio" controls>';
-                  $embed .= '<source src="' . url( $path ) . '" type="audio/ogg">';
-                  $embed .= '<p>Download <a href="' . url( $path ) . '">OGG</a> audio.</p>';
+                  $embed .= '<source src="' . secure_url( $path ) . '" type="audio/ogg">';
+                  $embed .= '<p>Download <a href="' . secure_url( $path ) . '">OGG</a> audio.</p>';
                   $embed .= '</audio>'; 
                   if (isset($email)) {
-                    $embed .= '<p><i>If your email client doesn\' support audio embeds, here is a <a href="' . url( $path ) . '">link to the file</a> instead.</i></p>';
+                    $embed .= '<p><i>If your email client doesn\' support audio embeds, here is a <a href="' . secure_url( $path ) . '">link to the file</a> instead.</i></p>';
                   }
               } else {
                   $embed = '<p>[The recording \'' . $filepath[1] . '\' has not yet been uploaded, try again later.]</p>';