GitHub/Anki
1
0
Fork 0
mirror of https://github.com/ankitects/anki.git synced 2025-09-18 22:12:21 -04:00
Code Issues Projects Releases Packages 1 Wiki Activity Actions

Disable YouTube DL in mpv

Browse source 
mpv looks for ytdl on the path, which includes the CWD on Windows.
A malicious shared deck could place an executable called yt-dlp.exe in the
media folder, which mpv would then helpfully invoke the first time
a YouTube link was encountered.

A big thank you to Michael Lappas for the report.
This commit is contained in:
Damien Elmes 2025-05-10 18:38:58 +10:00
parent c33974f6ab
commit 5080451829
2 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
qt/aqt/mpv.py
View file

@ -88,6 +88,7 @@ class MPVBase:
"--keep-open=no", "--keep-open=no",
"--autoload-files=no", "--autoload-files=no",
"--gapless-audio=no", "--gapless-audio=no",
"--no-ytdl",
] ]
if is_win: if is_win:

1
qt/aqt/sound.py
View file

@ -394,6 +394,7 @@ class SimpleMpvPlayer(SimpleProcessPlayer, VideoPlayer):
"--keep-open=no", "--keep-open=no",
"--input-media-keys=no", "--input-media-keys=no",
"--autoload-files=no", "--autoload-files=no",
"--no-ytdl",
] ]
) )