Alex Shnitman ebcfe577bc fix: fail closed when an SSRF-guarded host cannot be resolved ...

validate_url() previously returned None (allow) on socket.gaierror, so a
host that failed to resolve at check time was passed straight to yt-dlp. A
host we cannot resolve is a host we cannot verify as non-internal, and it may
resolve differently when yt-dlp fetches it. Reject it instead.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-20 23:45:08 +03:00

..

tests

fix: fail closed when an SSRF-guarded host cannot be resolved

2026-07-20 23:45:08 +03:00

bg_tasks.py

fix: harden download lifecycle, subscriptions, and UI robustness

2026-07-12 08:08:14 +03:00

dl_formats.py

fix: harden download lifecycle, subscriptions, and UI robustness

2026-07-12 08:08:14 +03:00

main.py

fix: enforce download-dir containment at the resolved-path chokepoint

2026-07-20 23:44:43 +03:00

state_store.py

fix: fsync parent dir after direct-write fallback for durability parity

2026-07-05 04:11:12 -07:00

subscriptions.py

fix: block SSRF via user-submitted URLs

2026-07-16 21:31:51 +03:00

url_guard.py

fix: fail closed when an SSRF-guarded host cannot be resolved

2026-07-20 23:45:08 +03:00

ytdl.py

fix: enforce download-dir containment at the resolved-path chokepoint

2026-07-20 23:44:43 +03:00