yt-dlp/test
Simon Sawicki de015e9307
[core] Prevent RCE when using --exec with %q (CVE-2023-40581)
The shell escape function is now using `""` instead of `\"`. `utils.Popen` has been patched to properly quote commands.

Prior to this fix using `--exec` together with `%q` when on Windows could cause remote code to execute. See https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-42h4-v29r-42qg for reference.

Authored by: Grub4K
2023-09-24 02:29:01 +02:00
..
testdata Improve plugin architecture (#5553) 2023-01-01 04:29:22 +00:00
__init__.py Add support for single-test tox runs 2013-10-12 13:17:11 -04:00
conftest.py [tests] Add tests for socks proxies (#7908) 2023-08-25 07:10:44 +00:00
helper.py [cleanup] Misc 2023-05-20 04:23:41 +05:30
parameters.json [cleanup] Misc 2022-11-16 06:57:07 +05:30
test_aes.py [dependencies] Simplify Cryptodome 2023-02-28 23:15:13 +05:30
test_age_restriction.py Update to ytdl-commit-2dd6c6e 2023-02-17 17:52:23 +05:30
test_all_urls.py [cleanup] Consistent style for file heads 2022-06-25 00:08:58 +05:30
test_cache.py [cleanup] Consistent style for file heads 2022-06-25 00:08:58 +05:30
test_compat.py [compat] Ensure submodules are imported correctly 2023-07-22 18:10:35 +05:30
test_config.py Fix config locations (#5933) 2023-01-07 00:31:00 +05:30
test_cookies.py [cookies] Update for chromium changes (#6897) 2023-05-29 19:21:35 +05:30
test_download.py [test:download] Test for expected_exception 2023-09-21 17:48:57 -05:00
test_downloader_external.py [fd/external] Fix ffmpeg input from stdin (#7655) 2023-07-22 02:32:49 +00:00
test_downloader_http.py [utils] Add temporary shim for logging 2023-07-15 16:18:34 +05:30
test_execution.py [core] Raise minimum recommended Python version to 3.8 (#8183) 2023-09-24 02:24:47 +02:00
test_InfoExtractor.py [utils] FormatSorter: Improve size and br 2023-06-21 06:10:38 +05:30
test_iqiyi_sdk_interpreter.py [cleanup] Consistent style for file heads 2022-06-25 00:08:58 +05:30
test_jsinterp.py Update to ytdl-commit-07af47 2023-06-21 09:21:23 +05:30
test_netrc.py [cleanup] Consistent style for file heads 2022-06-25 00:08:58 +05:30
test_networking.py [tests] Add tests for socks proxies (#7908) 2023-08-25 07:10:44 +00:00
test_networking_utils.py [cleanup] Misc (#8182) 2023-09-23 20:00:31 +00:00
test_overwrites.py [cleanup] Consistent style for file heads 2022-06-25 00:08:58 +05:30
test_plugins.py Improve plugin architecture (#5553) 2023-01-01 04:29:22 +00:00
test_post_hooks.py [cleanup] Consistent style for file heads 2022-06-25 00:08:58 +05:30
test_postprocessors.py [SponsorBlock] Support chapter category (#5260) 2022-10-18 22:21:57 +05:30
test_socks.py [networking] Fix various socks proxy bugs (#8065) 2023-09-18 07:33:26 +00:00
test_subtitles.py [cleanup] Consistent style for file heads 2022-06-25 00:08:58 +05:30
test_update.py.disabled [cleanup] Consistent style for file heads 2022-06-25 00:08:58 +05:30
test_utils.py [core] Prevent RCE when using --exec with %q (CVE-2023-40581) 2023-09-24 02:29:01 +02:00
test_verbose_output.py [cleanup] Consistent style for file heads 2022-06-25 00:08:58 +05:30
test_write_annotations.py.disabled [cleanup] Consistent style for file heads 2022-06-25 00:08:58 +05:30
test_youtube_lists.py [extractor/youtube:tab] Update tab handling for redesign (#5439) 2022-11-09 14:28:44 +05:30
test_youtube_misc.py [cleanup] Consistent style for file heads 2022-06-25 00:08:58 +05:30
test_youtube_signature.py [extractor/youtube] Improve nsig function name extraction 2023-06-22 13:27:18 +05:30
test_YoutubeDL.py [core] Prevent RCE when using --exec with %q (CVE-2023-40581) 2023-09-24 02:29:01 +02:00
test_YoutubeDLCookieJar.py [cleanup] Misc fixes 2023-07-22 09:09:52 +05:30
testcert.pem
versions.json [update] fix (unexploitable) BB'06 vulnerability in rsa_verify 2016-01-21 20:12:17 +00:00