diff options
| author | bashonly <bashonly@bashonly.com> | 2023-08-16 18:42:48 -0500 |
|---|---|---|
| committer | Simon Sawicki <contact@grub4k.xyz> | 2023-11-14 22:04:25 +0100 |
| commit | f04b5bedad7b281bee9814686bba1762bae092eb (patch) | |
| tree | c18255b7b8d917a21ef1d4aa1fd66b62806fed8c /yt_dlp/extractor/vimeo.py | |
| parent | d4f14a72dc1dd79396e0e80980268aee902b61e4 (diff) | |
[ie] Do not smuggle `http_headers`
See: https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-3ch3-jhc6-5r8x
Authored by: coletdjnz
Diffstat (limited to 'yt_dlp/extractor/vimeo.py')
| -rw-r--r-- | yt_dlp/extractor/vimeo.py | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/yt_dlp/extractor/vimeo.py b/yt_dlp/extractor/vimeo.py index e72fa50fa..e5e8144bb 100644 --- a/yt_dlp/extractor/vimeo.py +++ b/yt_dlp/extractor/vimeo.py @@ -37,14 +37,14 @@ class VimeoBaseInfoExtractor(InfoExtractor): @staticmethod def _smuggle_referrer(url, referrer_url): - return smuggle_url(url, {'http_headers': {'Referer': referrer_url}}) + return smuggle_url(url, {'referer': referrer_url}) def _unsmuggle_headers(self, url): """@returns (url, smuggled_data, headers)""" url, data = unsmuggle_url(url, {}) headers = self.get_param('http_headers').copy() - if 'http_headers' in data: - headers.update(data['http_headers']) + if 'referer' in data: + headers['Referer'] = data['referer'] return url, data, headers def _perform_login(self, username, password): |