Mirrors/metube
1
0
Fork 1
mirror of https://github.com/alexta69/metube.git synced 2026-07-18 00:58:18 +00:00
Code Issues Projects Releases Packages Wiki Activity
metube/app
History
Exact
Alex Shnitman fdfbfed5e2 fix: prevent playlist/channel title path traversal (closes GHSA-vh67-38x4-w8pc) 
Sanitize path separators and .. segments in playlist/channel titles before they are baked into yt-dlp output templates, and refuse downloads whose resolved output directory escapes DOWNLOAD_DIR.
2026-07-13 23:07:39 +03:00
..
tests fix: prevent playlist/channel title path traversal (closes GHSA-vh67-38x4-w8pc) 2026-07-13 23:07:39 +03:00
bg_tasks.py fix: harden download lifecycle, subscriptions, and UI robustness 2026-07-12 08:08:14 +03:00
dl_formats.py fix: harden download lifecycle, subscriptions, and UI robustness 2026-07-12 08:08:14 +03:00
main.py fix: harden download lifecycle, subscriptions, and UI robustness 2026-07-12 08:08:14 +03:00
state_store.py fix: fsync parent dir after direct-write fallback for durability parity 2026-07-05 04:11:12 -07:00
subscriptions.py fix: harden download lifecycle, subscriptions, and UI robustness 2026-07-12 08:08:14 +03:00
ytdl.py fix: prevent playlist/channel title path traversal (closes GHSA-vh67-38x4-w8pc) 2026-07-13 23:07:39 +03:00