You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
yt-dlp/test
Simon Sawicki ff07792676
[core] Prevent RCE when using `--exec` with `%q` (CVE-2024-22423)
The shell escape function now properly escapes `%`, `\\` and `\n`. `utils.Popen` as well as `%q` output template expansion have been patched accordingly.

Prior to this fix using `--exec` together with `%q` when on Windows could cause remote code to execute. See https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-hjq6-52gw-2g7p for more details.

Authored by: Grub4K
1 month ago
..
testdata Improve plugin architecture (#5553) 1 year ago
__init__.py Add support for single-test tox runs 11 years ago
conftest.py [rh:websockets] Migrate websockets to networking framework (#7720) 6 months ago
helper.py [ie] Migrate commonly plural fields to lists (#8917) 3 months ago
parameters.json [cleanup] Misc 2 years ago
test_InfoExtractor.py [utils] `FormatSorter`: Improve `size` and `br` 11 months ago
test_YoutubeDL.py Infer `acodec` for single-codec containers 2 months ago
test_YoutubeDLCookieJar.py [cleanup] Misc fixes 10 months ago
test_aes.py [dependencies] Simplify `Cryptodome` 1 year ago
test_age_restriction.py Update to ytdl-commit-2dd6c6e 1 year ago
test_all_urls.py [cleanup] Consistent style for file heads 2 years ago
test_cache.py [cleanup] Consistent style for file heads 2 years ago
test_compat.py [compat] Ensure submodules are imported correctly 10 months ago
test_config.py Fix config locations (#5933) 1 year ago
test_cookies.py [cleanup] Standardize `import datetime as dt` (#8978) 2 months ago
test_download.py [test:download] Test for `expected_exception` 8 months ago
test_downloader_external.py [fd/external] Fix ffmpeg input from stdin (#7655) 10 months ago
test_downloader_http.py [utils] Add temporary shim for logging 10 months ago
test_execution.py [docs] Misc Cleanup (#8977) 2 months ago
test_iqiyi_sdk_interpreter.py [cleanup] Consistent style for file heads 2 years ago
test_jsinterp.py Update to ytdl-commit-07af47 11 months ago
test_netrc.py [cleanup] Consistent style for file heads 2 years ago
test_networking.py [rh:curlcffi] Add support for `curl_cffi` 2 months ago
test_networking_utils.py [networking] Remove `_CompatHTTPError` (#8871) 4 months ago
test_overwrites.py [cleanup] Consistent style for file heads 2 years ago
test_plugins.py Improve plugin architecture (#5553) 1 year ago
test_post_hooks.py [cleanup] Consistent style for file heads 2 years ago
test_postprocessors.py [SponsorBlock] Support `chapter` category (#5260) 2 years ago
test_socks.py [rh:curlcffi] Add support for `curl_cffi` 2 months ago
test_subtitles.py [cleanup] Consistent style for file heads 2 years ago
test_traversal.py [cleanup] Misc (#9426) 1 month ago
test_update.py [cleanup] Misc (#8598) 5 months ago
test_utils.py [core] Prevent RCE when using `--exec` with `%q` (CVE-2024-22423) 1 month ago
test_verbose_output.py [cleanup] Consistent style for file heads 2 years ago
test_websockets.py [test] Workaround websocket server hanging (#9467) 2 months ago
test_write_annotations.py.disabled [cleanup] Consistent style for file heads 2 years ago
test_youtube_lists.py [extractor/youtube:tab] Update tab handling for redesign (#5439) 2 years ago
test_youtube_misc.py [cleanup] Consistent style for file heads 2 years ago
test_youtube_signature.py [extractor/youtube] Improve nsig function name extraction 11 months ago
testcert.pem Add a test for --no-check-certificate 9 years ago