SECURITY: Sanitize YouTube Onebox data (PR #13748)

CVE-2021-32764

GitHub