yt-dlp

Author	SHA1	Message	Date
bashonly	632b8ee54e	[core] Release workflow and Updater cleanup (#8640 ) - Only use trusted publishing with PyPI and remove support for PyPI tokens from release workflow - Clean up improper actions syntax in the build workflow inputs - Refactor Updater to allow for consistent unit testing with `UPDATE_SOURCES` Authored by: bashonly	2 years ago
bashonly	f4b95acafc	Remove Python 3.7 support (#8361 ) Closes #7803 Authored by: bashonly	2 years ago
bashonly	87264d4fda	[test:update] Implement simple updater unit tests Authored by: bashonly	2 years ago
shirt-dev	3dd264bf42	#64 Implement self updater Co-authored-by: shirtjs <2660574+shirtjs@users.noreply.github.com> (shirt-dev) Co-authored-by: pukkandan <pukkandan@gmail.com>	4 years ago
Unknown	cefecac12c	[skip travis] renaming to avoid using same folder when using pip install for example	5 years ago
Filippo Valsorda	4d318be195	[update] fix (unexploitable) BB'06 vulnerability in rsa_verify The rsa_verify code was vulnerable to a BB'06 attack, allowing to forge signatures for arbitrary messages if and only if the public key exponent is 3. Since the updates key is hardcoded to 65537, there is no risk for youtube-dl, but I don't want vulnerable code in the wild. The new function adopts a way safer approach of encoding-and-comparing to replace the dangerous parsing code.	10 years ago