Enclosure filenames should be sanitized

mlj / castget

A simple, command-line based RSS enclosure downloader, primarily intended for automatic, unattended downloading of podcasts.

http://castget.johndal.com

GNU General Public License v2.0

103 stars 23 forks source link

Enclosure filenames should be sanitized #4

Closed mlj closed 8 years ago

mlj commented 8 years ago

castget doesn't remove URL parameters before accepting filenames from RSS:

20151129_atc_a_star-crossed_scientific_fact_the_story_of_vulcan_planet_that_never_was.mp3?sc=16&orgId=1&forsearch=0&topicId=1033&d=383&p=2&story=457782813&t=progseg&e=457792892&seg=9&ft=ryop&f=1032
2619354_2015-11-23-083354.64k.mp3?ad_params=zones%3DPreroll%2CPreroll2%2CMidroll%2CMidroll2%2CPostroll%2CPostroll2%7Cstation_id%3D1831