Re: [FFmpeg-devel] [PATCH 2/2] [RFC] avformat/avio: Fail on opening non file urls which exist as local files without whitelists

2016-12-05 Thread wm4
On Mon, 5 Dec 2016 13:52:51 +0100 Michael Niedermayer wrote: > TODO: this needs to cleanly open a file url context for checking > > This stops someone having a local file like "http:evilhost.com" and playing it > as "http:evilhost.com" without explicitly specifying the

[FFmpeg-devel] [PATCH 2/2] [RFC] avformat/avio: Fail on opening non file urls which exist as local files without whitelists

2016-12-05 Thread Michael Niedermayer
TODO: this needs to cleanly open a file url context for checking This stops someone having a local file like "http:evilhost.com" and playing it as "http:evilhost.com" without explicitly specifying the http protocol on the whitelist That is it reduces the impact of people not using the "file:"