Alex Shnitman fdfbfed5e2 fix: prevent playlist/channel title path traversal (closes GHSA-vh67-38x4-w8pc) ...

Sanitize path separators and .. segments in playlist/channel titles before they are baked into yt-dlp output templates, and refuse downloads whose resolved output directory escapes DOWNLOAD_DIR.

2026-07-13 23:07:39 +03:00

..

tests

fix: prevent playlist/channel title path traversal (closes GHSA-vh67-38x4-w8pc)

2026-07-13 23:07:39 +03:00

bg_tasks.py

fix: harden download lifecycle, subscriptions, and UI robustness

2026-07-12 08:08:14 +03:00

dl_formats.py

fix: harden download lifecycle, subscriptions, and UI robustness

2026-07-12 08:08:14 +03:00

main.py

fix: harden download lifecycle, subscriptions, and UI robustness

2026-07-12 08:08:14 +03:00

state_store.py

fix: fsync parent dir after direct-write fallback for durability parity

2026-07-05 04:11:12 -07:00

subscriptions.py

fix: harden download lifecycle, subscriptions, and UI robustness

2026-07-12 08:08:14 +03:00

ytdl.py

fix: prevent playlist/channel title path traversal (closes GHSA-vh67-38x4-w8pc)

2026-07-13 23:07:39 +03:00