You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Filippo Valsorda 4d318be195 [update] fix (unexploitable) BB'06 vulnerability in rsa_verify ... The rsa_verify code was vulnerable to a BB'06 attack, allowing to forge signatures for arbitrary messages if and only if the public key exponent is 3. Since the updates key is hardcoded to 65537, there is no risk for youtube-dl, but I don't want vulnerable code in the wild. The new function adopts a way safer approach of encoding-and-comparing to replace the dangerous parsing code.		9 years ago
..
swftests	…
__init__.py	…
helper.py	…
parameters.json	…
test_InfoExtractor.py	…
test_YoutubeDL.py	[YoutubeDL] urlopen: disable the 'file:' protocol (#8227)	9 years ago
test_aes.py	…
test_age_restriction.py	…
test_all_urls.py	…
test_cache.py	…
test_compat.py	…
test_download.py	…
test_execution.py	…
test_http.py	…
test_jsinterp.py	[jsinterp] Support alternative function definition form	9 years ago
test_netrc.py	…
test_postprocessors.py	…
test_subtitles.py	[test_subtitles] remove BlipTV test	9 years ago
test_swfinterp.py	…
test_unicode_literals.py	…
test_update.py	[update] fix (unexploitable) BB'06 vulnerability in rsa_verify	9 years ago
test_utils.py	[test_utils] Add tests for encode_compat_str	9 years ago
test_write_annotations.py	Fix typos	9 years ago
test_youtube_lists.py	…
test_youtube_signature.py	…
testcert.pem	…
versions.json	[update] fix (unexploitable) BB'06 vulnerability in rsa_verify	9 years ago