shaka-project / shaka-streamer

A simple config-file based approach to preparing streaming media, based on FFmpeg and Shaka Packager.
https://shaka-project.github.io/shaka-streamer/
Apache License 2.0
198 stars 62 forks source link

Fix arbitrary file reading vulnerabilities. #104

Closed haby0 closed 2 years ago

haby0 commented 2 years ago

Use werkzeug.utils.secure_filename to fix arbitrary file reading vulnerabilities.

haby0 commented 2 years ago

From: https://github.com/google/shaka-streamer/issues/102

joeyparrish commented 2 years ago

@haby0, can you please look at https://github.com/google/shaka-streamer/pull/104/checks?check_run_id=4501299635 and sign the CLA?

haby0 commented 2 years ago

@joeyparrish I have signed the CLA.