mirror of https://github.com/yt-dlp/yt-dlp
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
If someone is running youtube-dl on a server to deliver files, the user could input 'file:///some/important/file' and youtube-dl would save that file as a video giving access to sensitive information to the user.
'file:' urls can be filtered, but the user can use an URL to a crafted m3u8 manifest like:
#EXTM3U
#EXT-X-MEDIA-SEQUENCE:0
#EXTINF:10.0
file:///etc/passwd
#EXT-X-ENDLIST
With this patch 'file:' URLs raise URLError like for unknown protocols.
|
10 years ago | |
|---|---|---|
| .. | ||
| swftests | 11 years ago | |
| __init__.py | 12 years ago | |
| helper.py | 10 years ago | |
| parameters.json | 11 years ago | |
| test_InfoExtractor.py | 10 years ago | |
| test_YoutubeDL.py | 10 years ago | |
| test_aes.py | 11 years ago | |
| test_age_restriction.py | 11 years ago | |
| test_all_urls.py | 10 years ago | |
| test_cache.py | 11 years ago | |
| test_compat.py | 10 years ago | |
| test_download.py | 10 years ago | |
| test_execution.py | 11 years ago | |
| test_http.py | 11 years ago | |
| test_jsinterp.py | 10 years ago | |
| test_netrc.py | 11 years ago | |
| test_postprocessors.py | 11 years ago | |
| test_subtitles.py | 10 years ago | |
| test_swfinterp.py | 11 years ago | |
| test_unicode_literals.py | 11 years ago | |
| test_utils.py | 10 years ago | |
| test_write_annotations.py | 10 years ago | |
| test_youtube_lists.py | 10 years ago | |
| test_youtube_signature.py | 11 years ago | |
| testcert.pem | 11 years ago | |