Mirroring
/
yt-dlp
mirror of https://github.com/yt-dlp/yt-dlp
1
0
Fork 0
Code Issues Releases Wiki Activity
yt-dlp/test
History
Filippo Valsorda 4d318be195 [update] fix (unexploitable) BB'06 vulnerability in rsa_verify 
The rsa_verify code was vulnerable to a BB'06 attack, allowing to forge
signatures for arbitrary messages if and only if the public key exponent is
3.  Since the updates key is hardcoded to 65537, there is no risk for
youtube-dl, but I don't want vulnerable code in the wild.

The new function adopts a way safer approach of encoding-and-comparing to
replace the dangerous parsing code.
..
swftests [swfinterp] Add more builtins and improve static variables
__init__.py Add support for single-test tox runs
helper.py [test/helper] Fix style
parameters.json Remove the --max-quality option
test_InfoExtractor.py [extractor/common] Allow angle brackets in attributes in _og_regexes ()
test_YoutubeDL.py [YoutubeDL] urlopen: disable the 'file:' protocol ()
test_aes.py [test/aes] Fix on python 3.3 and higher
test_age_restriction.py [test_age_restriction] remove misbehaving test
test_all_urls.py [test/test_all_urls] Update pbs extractor name
test_cache.py [test_cache] Add a dot in the file name
test_compat.py [compat] compat_etree_fromstring: also decode the text attribute
test_download.py [test/test_download] Use extract_flat = 'in_playlist' for playlist items
test_execution.py [test_execution] Fix test under python 2 @ windows
test_http.py [test/http] Add test for proxy support
test_jsinterp.py [jsinterp] Support alternative function definition form
test_netrc.py Make sure netrc works for all extractors with login support
test_postprocessors.py [metadatafromtitle] Some improvements and cleanup
test_subtitles.py [test_subtitles] remove BlipTV test
test_swfinterp.py PEP8: W503
test_unicode_literals.py [test/unicode_literals] Don't look into the .git and .tox directories
test_update.py [update] fix (unexploitable) BB'06 vulnerability in rsa_verify
test_utils.py [test_utils] Add tests for encode_compat_str
test_write_annotations.py Fix typos
test_youtube_lists.py [test_youtube_lists] Add test flat playlist entries' titles
test_youtube_signature.py [jsinterp] Disable comment support
testcert.pem Add a test for --no-check-certificate
versions.json [update] fix (unexploitable) BB'06 vulnerability in rsa_verify