Sanitize similar content avatars

js/ui/components/SimilarContentCard.js

@@ -1,5 +1,6 @@
 import { normalizeDesignSystemContext } from "../../designSystem.js";
 import { formatShortNpub } from "../../utils/formatters.js";
+import { sanitizeProfileMediaUrl } from "../../utils/profileMedia.js";
 
 const DEFAULT_PROFILE_AVATAR = "assets/svg/default-profile.svg";
 
@@ -213,15 +214,26 @@ export class SimilarContentCard {
           continue;
         }
         const trimmed = entry.trim();
-        if (trimmed) {
-          return trimmed;
+        if (!trimmed) {
+          continue;
+        }
+        const sanitized = sanitizeProfileMediaUrl(trimmed);
+        if (sanitized) {
+          return sanitized;
         }
       }
 
-      return "";
+      const fallback =
+        typeof baseline.picture === "string" && baseline.picture.trim()
+          ? sanitizeProfileMediaUrl(baseline.picture) || baseline.picture.trim()
+          : "";
+
+      return fallback;
     })();
 
-    return { name, npub, shortNpub, pubkey, picture };
+    const resolvedPicture = picture || DEFAULT_PROFILE_AVATAR;
+
+    return { name, npub, shortNpub, pubkey, picture: resolvedPicture };
   }
 
   applyIdentityToElements() {

js/ui/components/VideoModal.js

@@ -5063,12 +5063,30 @@ export class VideoModal {
         continue;
       }
       const trimmed = candidate.trim();
-      if (trimmed) {
-        picture = trimmed;
+      if (!trimmed) {
+        continue;
+      }
+      const sanitized = sanitizeProfileMediaUrl(trimmed);
+      if (sanitized) {
+        picture = sanitized;
         break;
       }
     }
 
+    if (!picture && pubkey) {
+      const robohash = `https://robohash.org/${pubkey}`;
+      picture = sanitizeProfileMediaUrl(robohash) || robohash;
+    }
+
+    if (!picture) {
+      const fallbackAvatar =
+        typeof this.DEFAULT_PROFILE_AVATAR === "string" &&
+        this.DEFAULT_PROFILE_AVATAR.trim()
+          ? this.DEFAULT_PROFILE_AVATAR.trim()
+          : "assets/svg/default-profile.svg";
+      picture = sanitizeProfileMediaUrl(fallbackAvatar) || fallbackAvatar;
+    }
+
     return {
       name,
       npub,