Alex Shnitman e061a8a5ba feat: ALLOW_PRIVATE_ADDRESSES to opt out of the SSRF checks (closes #1036) ...

The SSRF guard rejects any address that isn't globally routable, which breaks
proxy/VPN setups that resolve hosts into private or special-use ranges. The
reported case is Fake-IP clients (sing-box, Clash, Mihomo) that map YouTube to
the RFC 2544 benchmarking range 198.18.0.0/15 to tunnel the traffic; MeTube
rejected it with "Refusing to fetch internal address" even though yt-dlp itself
handles it fine.

Add a boolean ALLOW_PRIVATE_ADDRESSES (default false) that, when set, skips both
layers: validate_url returns after scheme validation without the internal-host
checks, and the connect-time socket guard is not installed. Threaded to the
download subprocess via Download so the guard sees it too. Scheme validation
(http/https only) still applies. Documented in the README as a trust-your-network
opt-out that disables SSRF protection.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-21 07:44:38 +03:00

..

tests

feat: ALLOW_PRIVATE_ADDRESSES to opt out of the SSRF checks (closes #1036)

2026-07-21 07:44:38 +03:00

bg_tasks.py

fix: harden download lifecycle, subscriptions, and UI robustness

2026-07-12 08:08:14 +03:00

dl_formats.py

fix: harden download lifecycle, subscriptions, and UI robustness

2026-07-12 08:08:14 +03:00

main.py

feat: ALLOW_PRIVATE_ADDRESSES to opt out of the SSRF checks (closes #1036)

2026-07-21 07:44:38 +03:00

state_store.py

fix: fsync parent dir after direct-write fallback for durability parity

2026-07-05 04:11:12 -07:00

subscriptions.py

feat: ALLOW_PRIVATE_ADDRESSES to opt out of the SSRF checks (closes #1036)

2026-07-21 07:44:38 +03:00

url_guard.py

feat: ALLOW_PRIVATE_ADDRESSES to opt out of the SSRF checks (closes #1036)

2026-07-21 07:44:38 +03:00

ytdl.py

feat: ALLOW_PRIVATE_ADDRESSES to opt out of the SSRF checks (closes #1036)

2026-07-21 07:44:38 +03:00