On 16/01/16 17:59, Anton Khirnov wrote:
> This patch should enable fixing the recently reported HLS+concat security 
> issue
> properly.
> 
> I didn't add any actual checks to the default open() wrapper yet, because we
> should agree on what they should be first. We can also add lavf global options
> configuring such checks.
> 
> Opinions?

Surely it seems more future-proof than my simple solution and hopefully
would appeal those that already have some path/url restriction code in
place (browsers maybe?).

lu


_______________________________________________
libav-devel mailing list
libav-devel@libav.org
https://lists.libav.org/mailman/listinfo/libav-devel

Reply via email to