Join GitHub today
GitHub is home to over 50 million developers working together to host and review code, manage projects, and build software together.
Sign upGitHub is where the world builds software
Millions of developers and companies build, ship, and maintain their software on GitHub — the largest and most advanced development platform in the world.
Part of URL executed as command after download from zdf.de #5221
Comments
|
It's not youtube-dl's problem, but a shell trick. You need to enclose your URLs in double quotes or escape the special characters if they contain "?", "&", "=". |
|
I am sorry for that - thank you! |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
After (successfully) downloading a video from zdf.de, a part of the url is executed as a command right in the console (kua... in the picture). I think this could be really dangerous, if an attacker somehow manages to slip somebody a forged URL.