On Mon, 5 Dec 2016 13:52:51 +0100
Michael Niedermayer wrote:
> TODO: this needs to cleanly open a file url context for checking
>
> This stops someone having a local file like "http:evilhost.com" and playing it
> as "http:evilhost.com" without explicitly specifying the
TODO: this needs to cleanly open a file url context for checking
This stops someone having a local file like "http:evilhost.com" and playing it
as "http:evilhost.com" without explicitly specifying the http protocol on the
whitelist
That is it reduces the impact of people not using the "file:"