Simon Sawicki de015e9307

[core] Prevent RCE when using --exec with %q (CVE-2023-40581) ...

The shell escape function is now using `""` instead of `\"`. `utils.Popen` has been patched to properly quote commands.

Prior to this fix using `--exec` together with `%q` when on Windows could cause remote code to execute. See https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-42h4-v29r-42qg for reference.

Authored by: Grub4K

2023-09-24 02:29:01 +02:00

..

testdata

Improve plugin architecture (#5553)

2023-01-01 04:29:22 +00:00

__init__.py

Add support for single-test tox runs

2013-10-12 13:17:11 -04:00

conftest.py

[tests] Add tests for socks proxies (#7908)

2023-08-25 07:10:44 +00:00

helper.py

[cleanup] Misc

2023-05-20 04:23:41 +05:30

parameters.json

[cleanup] Misc

2022-11-16 06:57:07 +05:30

test_aes.py

[dependencies] Simplify Cryptodome

2023-02-28 23:15:13 +05:30

test_age_restriction.py

Update to ytdl-commit-2dd6c6e

2023-02-17 17:52:23 +05:30

test_all_urls.py

[cleanup] Consistent style for file heads

2022-06-25 00:08:58 +05:30

test_cache.py

[cleanup] Consistent style for file heads

2022-06-25 00:08:58 +05:30

test_compat.py

[compat] Ensure submodules are imported correctly

2023-07-22 18:10:35 +05:30

test_config.py

Fix config locations (#5933)

2023-01-07 00:31:00 +05:30

test_cookies.py

[cookies] Update for chromium changes (#6897)

2023-05-29 19:21:35 +05:30

test_download.py

[test:download] Test for expected_exception

2023-09-21 17:48:57 -05:00

test_downloader_external.py

[fd/external] Fix ffmpeg input from stdin (#7655)

2023-07-22 02:32:49 +00:00

test_downloader_http.py

[utils] Add temporary shim for logging

2023-07-15 16:18:34 +05:30

test_execution.py

[core] Raise minimum recommended Python version to 3.8 (#8183)

2023-09-24 02:24:47 +02:00

test_InfoExtractor.py

[utils] FormatSorter: Improve size and br

2023-06-21 06:10:38 +05:30

test_iqiyi_sdk_interpreter.py

[cleanup] Consistent style for file heads

2022-06-25 00:08:58 +05:30

test_jsinterp.py

Update to ytdl-commit-07af47

2023-06-21 09:21:23 +05:30

test_netrc.py

[cleanup] Consistent style for file heads

2022-06-25 00:08:58 +05:30

test_networking_utils.py

[cleanup] Misc (#8182)

2023-09-23 20:00:31 +00:00

test_networking.py

[tests] Add tests for socks proxies (#7908)

2023-08-25 07:10:44 +00:00

test_overwrites.py

[cleanup] Consistent style for file heads

2022-06-25 00:08:58 +05:30

test_plugins.py

Improve plugin architecture (#5553)

2023-01-01 04:29:22 +00:00

test_post_hooks.py

[cleanup] Consistent style for file heads

2022-06-25 00:08:58 +05:30

test_postprocessors.py

[SponsorBlock] Support chapter category (#5260)

2022-10-18 22:21:57 +05:30

test_socks.py

[networking] Fix various socks proxy bugs (#8065)

2023-09-18 07:33:26 +00:00

test_subtitles.py

[cleanup] Consistent style for file heads

2022-06-25 00:08:58 +05:30

test_update.py.disabled

[cleanup] Consistent style for file heads

2022-06-25 00:08:58 +05:30

test_utils.py

[core] Prevent RCE when using --exec with %q (CVE-2023-40581)

2023-09-24 02:29:01 +02:00

test_verbose_output.py

[cleanup] Consistent style for file heads

2022-06-25 00:08:58 +05:30

test_write_annotations.py.disabled

[cleanup] Consistent style for file heads

2022-06-25 00:08:58 +05:30

test_youtube_lists.py

[extractor/youtube:tab] Update tab handling for redesign (#5439)

2022-11-09 14:28:44 +05:30

test_youtube_misc.py

[cleanup] Consistent style for file heads

2022-06-25 00:08:58 +05:30

test_youtube_signature.py

[extractor/youtube] Improve nsig function name extraction

2023-06-22 13:27:18 +05:30

test_YoutubeDL.py

[core] Prevent RCE when using --exec with %q (CVE-2023-40581)

2023-09-24 02:29:01 +02:00

test_YoutubeDLCookieJar.py

[cleanup] Misc fixes

2023-07-22 09:09:52 +05:30

testcert.pem

Add a test for --no-check-certificate

2015-01-30 02:57:37 +01:00

versions.json

[update] fix (unexploitable) BB'06 vulnerability in rsa_verify

2016-01-21 20:12:17 +00:00