diff options
| author | salmonik <salmonik@tuta.io> | 2026-11-04 01:06:48 +0100 |
|---|---|---|
| committer | salmonik <salmonik@tuta.io> | 2026-11-04 01:06:48 +0100 |
| commit | 1d4eba1ca43ad6ad6632c903eec79501c8c6183d (patch) | |
| tree | f667cab69cc08fc700272bd1a8c2c353b1b03776 /src/commands/utilities.rs | |
| parent | copyparty: never send the password to foreign hosts (diff) | |
| download | senator-sperma-1d4eba1ca43ad6ad6632c903eec79501c8c6183d.tar.gz senator-sperma-1d4eba1ca43ad6ad6632c903eec79501c8c6183d.zip | |
yt-dlp: ignore configs and stop option injection
Diffstat (limited to 'src/commands/utilities.rs')
| -rw-r--r-- | src/commands/utilities.rs | 8 |
1 files changed, 6 insertions, 2 deletions
diff --git a/src/commands/utilities.rs b/src/commands/utilities.rs index 33d732f..79f4508 100644 --- a/src/commands/utilities.rs +++ b/src/commands/utilities.rs | |||
| @@ -483,7 +483,11 @@ async fn run_download( | |||
| 483 | }; | 483 | }; |
| 484 | 484 | ||
| 485 | let mut cmd = tokio::process::Command::new("yt-dlp"); | 485 | let mut cmd = tokio::process::Command::new("yt-dlp"); |
| 486 | cmd.arg("-f") | 486 | // `--ignore-config` keeps a planted config file from injecting options; |
| 487 | // `--` stops a user-supplied URL from being parsed as a flag. | ||
| 488 | cmd.arg("--ignore-config") | ||
| 489 | .arg("--no-playlist") | ||
| 490 | .arg("-f") | ||
| 487 | .arg("bestaudio/bestvideo+bestaudio") | 491 | .arg("bestaudio/bestvideo+bestaudio") |
| 488 | .arg("--merge-output-format") | 492 | .arg("--merge-output-format") |
| 489 | .arg("mp4") | 493 | .arg("mp4") |
| @@ -492,7 +496,7 @@ async fn run_download( | |||
| 492 | if is_audio { | 496 | if is_audio { |
| 493 | cmd.arg("--extract-audio").arg("--audio-format").arg(fmt); | 497 | cmd.arg("--extract-audio").arg("--audio-format").arg(fmt); |
| 494 | } | 498 | } |
| 495 | cmd.arg(sanitize_yt_url(url)); | 499 | cmd.arg("--").arg(sanitize_yt_url(url)); |
| 496 | 500 | ||
| 497 | let output = cmd | 501 | let output = cmd |
| 498 | .output() | 502 | .output() |
