Arnavion / libjass

Renders ASS subs in the browser.
Apache License 2.0
174 stars 29 forks source link

Opt-in support for command execution #113

Closed henke37 closed 6 years ago

henke37 commented 6 years ago

An obscure feature of ass files is that they can execute os level commands. This is obviously impossible and/or a huge security vulnerability on the web.

But why not allow the user to provide a callback that can handle commands as they please? Sorta like the ExternalInterface system the flash player used. This way advanced users can provide whatever support they like for all sorts of nonstandard effects.

Arnavion commented 6 years ago

What is your use case? Given that desktop renderers (libass, VSFilter) ignore Command events, I doubt anyone is writing a general-purpose script that has them.

henke37 commented 6 years ago

I have no usecase.

Arnavion commented 6 years ago

I don't think it's worth implementing it then.