majohn-r / mp3repair

An MP3 file repair command-line utility
MIT License
0 stars 0 forks source link

Remove resetLibrary options that can compromise security #194

Closed majohn-r closed 2 months ago

majohn-r commented 2 months ago

The --extension and --metadataDir settings can be maliciously used to delete an arbitrary set of files from anywhere on the user's computer.

The --service setting can be maliciously used to turn off an arbitrary service on the user's computer.

This issue takes those settings away. This is a breaking change, but of low likelihood of causing problems.