Jaime Marquínez Ferrándiz e37afbe0b8 [YoutubeDL] urlopen: disable the 'file:' protocol (#8227) ... If someone is running youtube-dl on a server to deliver files, the user could input 'file:///some/important/file' and youtube-dl would save that file as a video giving access to sensitive information to the user. 'file:' urls can be filtered, but the user can use an URL to a crafted m3u8 manifest like: #EXTM3U #EXT-X-MEDIA-SEQUENCE:0 #EXTINF:10.0 file:///etc/passwd #EXT-X-ENDLIST With this patch 'file:' URLs raise URLError like for unknown protocols.		2016-01-14 00:24:04 +01:00
..
downloader	[downloader/fragment] Move helper data to context dict	2016-01-13 00:00:31 +06:00
extractor	[tudou] Add support for Albums and Playlists and extract more metadata	2016-01-13 13:29:00 +01:00
postprocessor	[FFmpegPostProcessor] Default of prefer ffmpeg	2015-12-09 20:56:00 -03:00
__init__.py	Using internal opener	2015-11-10 17:15:23 +02:00
__main__.py	Use insert for all sys.path manipulations	2015-09-26 22:04:41 +02:00
aes.py	[aes] Fix for python 3.2	2015-05-22 00:06:10 +06:00
cache.py	[cache] Fix writing to paths with unicode characters	2014-11-19 00:02:24 +01:00
compat.py	Rename compat_urllib_request_Request to sanitized_Request and move to utils	2015-11-23 21:55:15 +06:00
jsinterp.py	[jsinterp] Extend function regex (Closes #7900, closes #7901)	2015-12-18 18:57:49 +06:00
options.py	[options] Prefer --convert-subs spelling	2015-12-30 23:12:35 +06:00
swfinterp.py	Fix typos	2016-01-10 17:24:28 +01:00
update.py	Use proper encoding on compat_str construction when necessary	2015-12-20 06:29:36 +06:00
utils.py	Revert "fix typos"	2016-01-10 19:27:22 +01:00
version.py	release 2016.01.09	2016-01-09 01:16:08 +01:00
YoutubeDL.py	[YoutubeDL] urlopen: disable the 'file:' protocol (#8227)	2016-01-14 00:24:04 +01:00