Age | Commit message (Collapse) | Author | |
---|---|---|---|
2016-01-21 | [update] fix (unexploitable) BB'06 vulnerability in rsa_verify | Filippo Valsorda | |
The rsa_verify code was vulnerable to a BB'06 attack, allowing to forge signatures for arbitrary messages if and only if the public key exponent is 3. Since the updates key is hardcoded to 65537, there is no risk for youtube-dl, but I don't want vulnerable code in the wild. The new function adopts a way safer approach of encoding-and-comparing to replace the dangerous parsing code. | |||
2016-01-14 | [YoutubeDL] urlopen: disable the 'file:' protocol (#8227) | Jaime Marquínez Ferrándiz | |
If someone is running youtube-dl on a server to deliver files, the user could input 'file:///some/important/file' and youtube-dl would save that file as a video giving access to sensitive information to the user. 'file:' urls can be filtered, but the user can use an URL to a crafted m3u8 manifest like: #EXTM3U #EXT-X-MEDIA-SEQUENCE:0 #EXTINF:10.0 file:///etc/passwd #EXT-X-ENDLIST With this patch 'file:' URLs raise URLError like for unknown protocols. | |||
2016-01-10 | Fix typos | Jakub Wilk | |
Closes #8200. | |||
2015-12-21 | [test_subtitles] remove BlipTV test | remitamine | |
2015-12-20 | [test_utils] Add tests for encode_compat_str | Sergey M․ | |
2015-12-19 | [utils] Support alternative timestamp format in TTML | Yen Chi Hsuan | |
Fixes #7608 | |||
2015-12-19 | [utils] Fix TTML conversion | Yen Chi Hsuan | |
Tolerate invalid timestamps (closes #7909) | |||
2015-12-14 | [utils] Add remove_quotes | Sergey M․ | |
2015-12-08 | [test/test_all_urls] Update pbs extractor name | Jaime Marquínez Ferrándiz | |
It's in lowercase now (since e15e2ef7a00362fc1e89d9959241efad46325c54). | |||
2015-11-22 | [utils] Check ext with trailing slash against the list of known extensions | Sergey M․ | |
2015-11-22 | [test_utils] Add tests for determine_ext | Sergey M․ | |
2015-11-16 | [utils] Skip invalid/non HTML entities (Closes #7518) | Sergey M․ | |
2015-11-10 | [jsinterp] Support alternative function definition form | Yen Chi Hsuan | |
2015-11-04 | [test/subtitles] Add test for DemocracynowIE | Yen Chi Hsuan | |
2015-11-02 | [utils] unified_strdate: Return None if the date format can't be recognized ↵ | Jaime Marquínez Ferrándiz | |
(fixes #7340) This issue was introduced with ae12bc3ebb4cb377c2b4337ec255e652b36f5143, it returned 'None'. | |||
2015-10-31 | Merge pull request #7296 from jaimeMF/xml_attrib_unicode | Sergey M | |
Use a wrapper around xml.etree.ElementTree.fromstring in python 2.x (… | |||
2015-10-31 | [utils] Support list of xpath in xpath_element | Sergey M․ | |
2015-10-28 | [utils] Improve parse_iso8601 | Sergey M․ | |
2015-10-26 | [compat] compat_etree_fromstring: also decode the text attribute | Jaime Marquínez Ferrándiz | |
Deletes parse_xml from utils, because it also does it. | |||
2015-10-25 | [compat] compat_etree_fromstring: only decode bytes objects | Jaime Marquínez Ferrándiz | |
2015-10-25 | Use a wrapper around xml.etree.ElementTree.fromstring in python 2.x (#7178) | Jaime Marquínez Ferrándiz | |
Attributes aren't unicode objects, so they couldn't be directly used in info_dict fields (for example '--write-description' doesn't work with bytes). | |||
2015-10-23 | [test/test_download] Use extract_flat = 'in_playlist' for playlist items | Jaime Marquínez Ferrándiz | |
Some playlist extractors return a 'url' result, which wouldn't be resolved. | |||
2015-10-20 | [utils:js_to_json] Fix bad escape in double quoted strings | Sergey M․ | |
2015-10-18 | [extractor/common] Allow angle brackets in attributes in _og_regexes (#7215) | Sergey M․ | |
2015-10-18 | [test_youtube_lists] Add test flat playlist entries' titles | Sergey M․ | |
2015-10-14 | [test_InfoExtractor] Add test for unquoted attribute | Sergey M․ | |
2015-10-14 | [test_InfoExtractor] Add test for 7a6d76a64d8a89a08bb79791506fc18b993c4580 | Sergey M․ | |
2015-10-02 | [test/helper] Fix style | Jaime Marquínez Ferrándiz | |
Use the correct indentation to please flake8 | |||
2015-09-30 | [test/helper] Clarify field for list length mismatch | Sergey M․ | |
2015-09-30 | [test/helper] Spelling | Sergey M․ | |
2015-09-30 | [test/helper] Formatting | Sergey M․ | |
2015-09-30 | [test] use descriptive variable name | Qijiang Fan | |
2015-09-30 | [test] split expect_dict to two functions | Qijiang Fan | |
2015-09-30 | [test] recursively check dict and list in expect_info_dict | Qijiang Fan | |
This allows to use md5:, re:, etc within the str inside a list or dict. | |||
2015-09-21 | [youtube:history] Enable exractor | Sergey M․ | |
2015-09-20 | [youtube:history] Explain why it has disabled and skip test | Jaime Marquínez Ferrándiz | |
2015-09-07 | [test/test_write_annotations] fix test filename | remitamine | |
Closes #6781 | |||
2015-09-05 | [test_compat] Fix typo | Sergey M․ | |
2015-09-05 | [test_compat] Add test for compat_shlex_split | Sergey M․ | |
2015-09-05 | [test_utils] Add tests for cli option converters | Sergey M․ | |
2015-09-05 | [test_utils] Add more tests for xpath | Sergey M․ | |
2015-08-21 | [test/subtitles] Add test for ThePlatformFeedIE | Yen Chi Hsuan | |
2015-08-08 | [test/helper] Make age_limit checkable field | Sergey M․ | |
2015-08-08 | Merge pull request #6428 from dstftw/improve-generic-smil-support | Sergey M. | |
Improve generic SMIL support | |||
2015-08-04 | [YoutubeDL] format spec: correctly handle dashes and other unused operators | Jaime Marquínez Ferrándiz | |
'mp4-baseline-16x9' must be handled as a single string, but the '-' was treated as an operator. | |||
2015-08-03 | YoutubeDL: format spec: don't accept a bare '/' (#6124) | Jaime Marquínez Ferrándiz | |
2015-08-03 | Merge remote-tracking branch 'jaimemf/format_spec_groups' (closes #6124) | Jaime Marquínez Ferrándiz | |
2015-08-02 | [test/helper] Allow dicts for mincount | Sergey M․ | |
2015-08-02 | [test_downloader] Respect --force-generic-extractor | Sergey M․ | |
2015-08-01 | [utils] Make value optional for find_xpath_attr | Sergey M․ | |
This allows selecting particular attributes by name but without specifying the value and similar to xpath syntax `[@attrib]` |