Author: reimar Date: Sun May 5 19:02:35 2013 New Revision: 36241 Log: manpage: document -playlist being unsafe in its option description
This really should have been added to the manpage at the start of the previous decade. There's still bad advice about -playlist in the XML docs, but I'll remove that later when purging more obsolete/wrong stuff from there. Patch by Uoti Urpala [uau mplayer2 org] Modified: trunk/DOCS/man/en/mplayer.1 Modified: trunk/DOCS/man/en/mplayer.1 ============================================================================== --- trunk/DOCS/man/en/mplayer.1 Sun May 5 19:02:33 2013 (r36240) +++ trunk/DOCS/man/en/mplayer.1 Sun May 5 19:02:35 2013 (r36241) @@ -1283,6 +1283,15 @@ Expand TEXT only if the property NAME is Play files according to a playlist file (ASX, Winamp, SMIL, or one-file-per-line format). .br +.I WARNING: +The way MPlayer parses and uses playlist files is not safe against +maliciously constructed files. +Such files may trigger harmful actions. +This has been the case for all MPlayer versions, but unfortunately this +fact was not well documented earlier, and some people have even misguidedly +recommended use of -playlist with untrusted sources. +Do NOT use -playlist with random internet sources or files you don't trust! +.br .I NOTE: This option is considered an entry so options found after it will apply only to the elements of this playlist. _______________________________________________ MPlayer-DOCS mailing list [email protected] https://lists.mplayerhq.hu/mailman/listinfo/mplayer-docs
