Commit Graph

66 Commits (7f909046f4dc0fba472b4963145aef6e0d42491b)

Author SHA1 Message Date
bashonly cc85596d5b
[utils] `mimetype2ext`: Recognize `aacp` as `aac` ()
Authored by: bashonly
bashonly 6daf2c27c0
[utils] `unified_timestamp`: Recognize Sunday ()
Authored by: bashonly
bashonly 89a161e8c6
[cleanup] Misc ()
Closes 
Authored by: bashonly
bashonly cc0070f649 [utils] `parse_codecs`: Fix parsing of mixed case codec strings
Authored by: bashonly
bashonly b337d2989c
[cleanup] Misc ()
Authored by: bashonly
bashonly 2469119490
[core] Address gaps in allowed extensions ()
Adds some extensions missing in 5ce582448e

Closes , Closes 
Authored by: bashonly
bashonly cc767e9490
[core] Fix `--ignore-no-formats-error` ()
Fixes regression in 5ce582448e

Closes 
Authored by: Grub4K

Co-authored-by: Simon Sawicki <contact@grub4k.xyz>
Simon Sawicki 5ce582448e
[core] Disallow unsafe extensions (CVE-2024-38519)
Ref: https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-79w7-vh3h-8g4j

Authored by: Grub4K
sepro add96eb9f8
[cleanup] Add more ruff rules ()
Authored by: seproDev

Reviewed-by: bashonly <88596187+bashonly@users.noreply.github.com>
Reviewed-by: Simon Sawicki <contact@grub4k.xyz>
Simon Sawicki 5c019f6328
[misc] Cleanup ()
Closes 
Authored by: bashonly, seproDev, Grub4K

Co-authored-by: bashonly <88596187+bashonly@users.noreply.github.com>
Co-authored-by: sepro <4618135+seproDev@users.noreply.github.com>
coletdjnz 96a134dea6
[ie/youtube] Extract upload timestamp if available ()
Closes , Closes 
Authored by: coletdjnz
Simon Sawicki 64766459e3
[core/windows] Improve shell quoting and tests ()
Authored by: Grub4K
Simon Sawicki ff07792676
[core] Prevent RCE when using `--exec` with `%q` (CVE-2024-22423)
The shell escape function now properly escapes `%`, `\\` and `\n`. `utils.Popen` as well as `%q` output template expansion have been patched accordingly.

Prior to this fix using `--exec` together with `%q` when on Windows could cause remote code to execute. See https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-hjq6-52gw-2g7p for more details.

Authored by: Grub4K
Simon Sawicki 32abfb00bd
[utils] `traverse_obj`: Convenience improvements ()
Add support for:
- `http.cookies.Morsel`
- Multi type filters (`{type, type}`)

Authored by: Grub4K
pukkandan c305a25c1b
[cleanup] Standardize `import datetime as dt` ()
sepro 86e3b82261
[core] Fix `filesize_approx` calculation ()
Reverts 22e4dfacb6

Despite being documented as `Kbit/s`, the extractors/manifests were returning bitrates in SI units of kilobits/sec.

Authored by: seproDev, pukkandan
Simon Sawicki 3699eeb67c
[utils] `traverse_obj`: Allow unbranching using `all` and `any` ()
Authored by: Grub4K
pukkandan 615a84447e
[cleanup] Misc ()
Authored by: pukkandan, bashonly, seproDev
pukkandan 45491a2a30
[utils] Improve `repr` of `DateRange`, `match_filter_func`
pukkandan 93240fc184
[cleanup] Fix misc bugs ()
Closes 

Authored by: bashonly, seproDev, pukkandan, Grub4k
pukkandan 47ab66db0f
[docs] Misc Cleanup ()
Closes , 

Authored by: bashonly, Grub4k, Arthurszzz, seproDev, pukkandan

Co-authored-by: sepro <4618135+seproDev@users.noreply.github.com>
Co-authored-by: bashonly <bashonly@protonmail.com>
Co-authored-by: Arthurszzz <minecraftgamerarthur@gmail.com>
Co-authored-by: Simon Sawicki <accounts@grub4k.xyz>
Co-authored-by: bashonly <88596187+bashonly@users.noreply.github.com>
Simon Sawicki ffbd4f2a02
[utils] `traverse_obj`: Support `xml.etree.ElementTree.Element` ()
Authored by: Grub4K
Simon Sawicki f9fb3ce86e
[cleanup] Misc ()
Authored by: bashonly, pukkandan, seproDev, Grub4K

Co-authored-by: bashonly <bashonly@protonmail.com>
Co-authored-by: pukkandan <pukkandan.ytdlp@gmail.com>
Co-authored-by: sepro <4618135+seproDev@users.noreply.github.com>
Simon Sawicki 65de7d204c
Update to ytdl-commit-be008e6 ()
- [utils] Make restricted filenames ignore some Unicode categories (by dirkf)
- [ie/telewebion] Fix extraction (by Grub4K)
- [ie/imgur] Overhaul extractor (by bashonly, Grub4K)
- [ie/EpidemicSound] Add extractor (by Grub4K)

Authored by: bashonly, dirkf, Grub4K

Co-authored-by: bashonly <bashonly@protonmail.com>
coletdjnz 196eb0fe77
[networking] Strip whitespace around header values ()
Fixes https://github.com/yt-dlp/yt-dlp/issues/8729
Authored by: coletdjnz
Simon Sawicki 0b6f829b1d
[utils] `traverse_obj`: Move `is_user_input` into output template ()
Authored by: Grub4K
pukkandan a174c453ee
Let `read_stdin` obey `--quiet`
Closes 
coletdjnz ccfd70f4c2
[rh:websockets] Migrate websockets to networking framework ()
* Adds a basic WebSocket framework
* Introduces new minimum `websockets` version of 12.0
* Deprecates `WebSocketsWrapper`

Fixes https://github.com/yt-dlp/yt-dlp/issues/8439

Authored by: coletdjnz
bashonly f04b5bedad
[ie] Do not smuggle `http_headers`
See: https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-3ch3-jhc6-5r8x

Authored by: coletdjnz
bashonly 84e26038d4
[utils] `write_xattr`: Use `os.setxattr` if available ()
Closes 
Authored by: bashonly, Grub4K

Co-authored-by: Simon Sawicki <contact@grub4k.xyz>
Simon Sawicki 1c51c520f7
[fd/fragment] Improve progress calculation ()
This uses the download speed from all threads and also adds smoothing to speed and eta

Authored by: Grub4K
Awal Garg 9d7ded6419
[utils] `js_to_json`: Fix `Date` constructor parsing ()
Authored by: awalgarg, Grub4K
Simon Sawicki de015e9307
[core] Prevent RCE when using `--exec` with `%q` (CVE-2023-40581)
The shell escape function is now using `""` instead of `\"`. `utils.Popen` has been patched to properly quote commands.

Prior to this fix using `--exec` together with `%q` when on Windows could cause remote code to execute. See https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-42h4-v29r-42qg for reference.

Authored by: Grub4K
bashonly 52414d64ca
[utils] `js_to_json`: Handle `Array` objects
Authored by: Grub4K, std-move

Co-authored-by: std-move <26625259+std-move@users.noreply.github.com>
Co-authored-by: Simon Sawicki <accounts@grub4k.xyz>
Simon Sawicki 836e06d246
[core] Fix support for upcoming Python 3.12 ()
This also adds the following test runners:
- `3.12-dev` on `ubuntu-latest`
- `3.12-dev` on `windows-latest`
- `pypy-3.10` on `ubuntu-latest`

Authored by: Grub4K
Simon Sawicki f659e64394
[ie/bpb] Overhaul extractor ()
Authored by: Grub4K
pukkandan 3f7965105d
[utils] HTTPHeaderDict: Handle byte values
coletdjnz 4bf912282a
[networking] Remove dot segments during URL normalization ()
This implements RFC3986 5.2.4 remove_dot_segments during the URL normalization process.

Closes , 

Authored by: coletdjnz
coletdjnz bbeacff7fc
[networking] Ignore invalid proxies in env ()
Authored by: coletdjnz
pukkandan a250b24733
[compat] Ensure submodules are imported correctly
Closes 
bashonly af86873218
[utils] Improve `parse_duration`
Authored by: bashonly
coletdjnz 3d2623a898
[compat, networking] Deprecate old functions ()
Authored by: coletdjnz, pukkandan
coletdjnz 227bf1a33b
[networking] Rewrite architecture ()
New networking interface consists of a `RequestDirector` that directs
each `Request` to appropriate `RequestHandler` and returns the
`Response` or raises `RequestError`. The handlers define adapters to
transform its internal Request/Response/Errors to our interfaces.

User-facing changes:
- Fix issues with per request proxies on redirects for urllib
- Support for `ALL_PROXY` environment variable for proxy setting
- Support for `socks5h` proxy
   - Closes https://github.com/yt-dlp/yt-dlp/issues/6325, https://github.com/ytdl-org/youtube-dl/issues/22618, https://github.com/ytdl-org/youtube-dl/pull/28093
- Raise error when using `https` proxy instead of silently converting it to `http`

Authored by: coletdjnz
pukkandan c365dba843
[networking] Add module ()
No actual changes - code is only moved around
pukkandan 1b392f905d
[utils] Add temporary shim for logging
Related: , 
Mahmoud Abdel-Fattah 2af4eeb772
[utils] `clean_podcast_url`: Handle more trackers ()
Authored by: mabdelfattah, bashonly
Closes 
coletdjnz f8b4bcc0a7
[core] Prevent `Cookie` leaks on HTTP redirect
Ref: https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-v8mc-9377-rwjj

Authored by: coletdjnz
pukkandan 337734d4a8
[cleanup] Misc
pukkandan 91302ed349
[utils] clean_podcast_url: Handle protocol in redirect URL
Closes 
pukkandan e59e20744e
Bugfix for b4e0d75848