From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from ffbox0-bg.mplayerhq.hu (ffbox0-bg.ffmpeg.org [79.124.17.100]) by master.gitmailbox.com (Postfix) with ESMTP id F16A545CD3 for ; Wed, 3 May 2023 16:07:20 +0000 (UTC) Received: from [127.0.1.1] (localhost [127.0.0.1]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTP id C158568B04A; Wed, 3 May 2023 19:07:17 +0300 (EEST) Received: from ursule.remlab.net (vps-a2bccee9.vps.ovh.net [51.75.19.47]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTP id CF0CC68BD35 for ; Wed, 3 May 2023 19:07:10 +0300 (EEST) Received: from ursule.remlab.net (localhost [IPv6:::1]) by ursule.remlab.net (Postfix) with ESMTP id 3F693C006A for ; Wed, 3 May 2023 19:07:10 +0300 (EEST) Received: from basile.remlab.net ([2001:14ba:a080:a501:23a6:ebae:8f2a:4d73]) by ursule.remlab.net with ESMTPSA id yOs0DK6GUmRdXSkAwZXkwQ (envelope-from ) for ; Wed, 03 May 2023 19:07:10 +0300 From: =?ISO-8859-1?Q?R=E9mi?= Denis-Courmont To: FFmpeg development discussions and patches Date: Wed, 03 May 2023 19:07:09 +0300 Message-ID: <1846772.vxqQoQgO3c@basile.remlab.net> Organization: Remlab In-Reply-To: <20230503133359.GD1391451@pb2> References: <20230502193631.10844-1-michael@niedermayer.cc> <09C1198A-DB0A-43CC-ADCA-23594E0BFEDA@remlab.net> <20230503133359.GD1391451@pb2> MIME-Version: 1.0 Subject: Re: [FFmpeg-devel] [PATCH] [RFC] avformat: Add basic same origin check X-BeenThere: ffmpeg-devel@ffmpeg.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: FFmpeg development discussions and patches List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: FFmpeg development discussions and patches Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: ffmpeg-devel-bounces@ffmpeg.org Sender: "ffmpeg-devel" Archived-At: List-Archive: List-Post: TGUga2Vza2l2aWlra29uYSAzLiB0b3Vrb2t1dXRhIDIwMjMsIDE2LjMzLjU5IEVFU1QgTWljaGFl bCBOaWVkZXJtYXllciBhIMOpY3JpdCAKOgo+IFRoaXMgcGF0Y2ggd2FzIGluc3BpcmVkIGJ5IGEg cmVwb3J0IG9uIGZmbXBlZy1zZWN1cml0eSBhYm91dCBTU1JGCj4gKGZvciB3aGljaCBjdXN0b20g aW9fb3BlbigpIGNhbGxiYWNrIG9yIHNvZW0gc29ydCBvZiBzYW5kYm94aW5nL1ZNIGNhbiBiZQo+ ICB1c2VkIHRvIGF2b2lkIGl0KQo+ICBUaGUgcGF0Y2ggaGVyZSB3YXMgaW50ZW5kZWQgdG8gZXhw bG9yZSBpZiB3ZSBjYW4gcHJvdmlkZSBzb21ldGhpbmcgdGhhdHMKPiAgYmV0dGVyIHRhaG4gY3Vy cmVudGx5IGJ5IGRlZmF1bHQKCkkgYW0gbm90IHN1cmUgaG93IGEgZG9kZ3kgSExTIG1hbmlmZXN0 IHdvdWxkIGJlIGFueSBkaWZmZXJlbnQgZnJvbSB0aGUgdXNlciAKY2xpY2tpbmcgYW4gaHlwZXJs aW5rIGZyb20gYSBkb2RneSB3ZWJzaXRlIC0gb3Igb3BlbmluZyBhIGRvZGd5IHBsYXlsaXN0IGZp bGUgCmluIHRoZWlyIEZGbXBlZy1iYXNlZCBtZWRpYSBwbGF5ZXIgYXBwbGljYXRpb24gZm9yIHRo YXQgbWF0dGVyLiBFaXRoZXIgd2F5LCBpdCAKY2FuIG9wZW4gYW55IFVSTC4KCkl0IGlzIG9idmlv dXNseSBub3QgYW4gaWRlYWwgc2l0dWF0aW9uLCBidXQgYW55IHJlc3RyaWN0aW9uIGhlcmUgd2ls bCBtb3N0IApkZWZpbml0ZWx5IGJyZWFrIGV4aXN0aW5nIHVzZSBjYXNlcyAoYW5kIGxpa2VseSBi ZSBhYnVzZWQgYnkgc2VydmVyIG9wZXJhdG9ycyAKdG8gbG9jayBGRm1wZWcgb3V0KS4KCkV2ZW4g dGhlICJvYnZpb3VzIiBibG9ja2luZyBvZiBzZWN1cmUgKEhUVFBTKSB0byBub25zZWN1cmUgKEhU VFApIHJlZmVyZW5jZXMgCmlzIGxpa2VseSB0byBicmVhayBzdHVmZi4gSWYgdGhlIGVuZCByZXN1 bHQgaXMgdGhhdCBldmVyeWJvZHkganVzdCB0dXJucyBvcmlnaW4gCmNoZWNraW5nIG9mZiwgaXQn cyBwcmV0dHkgcG9pbnRsZXNzLgoKPiBCdXQgdGhlIHNhbWUgaXNzdWUgd2l0aCByb2xlcyBmbGlw cGVkIG9jY3VycyBmb3IgdGhlIGVuZCB1c2VyIGFuZCB0aGUgdXNlcgo+IGNhbm5vdCBiZSBleHBl Y3RlZCB0byBzZXR1cCBhIGN1c3RvbSBpb19vcGVuKCkgY2FsbGJhY2sgZm9yIGhpcyBwbGF5ZXIK PiBUaGUgY3VycmVudCBjb2RlIGNhbiBiZSBhbHNvIHVzZWQgdG8gcG9rZQo+IGFyb3VuZCB0aGUg bG9jYWwgbmV0d29yayBvZiB0aGUgdXNlci4gV2hpY2ggaXMgdW5leHBlY3RlZCBieSB0aGUgdXNl cgo+IGZvciBleGFtcGxlIGEgYXZpIGZpbGUgY291bGQgYmUgcHJvYmVkIGFzIGEgbTN1OCBwbGF5 bGlzdCBhbmQgdGhlbgo+IHBva2UgYXJvdW5kIG9uIHRoZSBsb2NhbCBuZXQgd2hpbGUgbWl4aW5n IHRoYXQgd2l0aCByZW1vdGUgdXJscwo+IGZyb20gdGhlIHRpbWluZyBvZiB0aGUgcmVtb3RlIGFj Y2Vzc2VzIHRoZSByZW1vdGUgcGFydHkgc2hvdWxkIGJlIGFibGUKPiB0byBpbmZlciB3aGF0IGhh cHBlbmVkIHdpdGggdGhlIGxvY2FsIHBva2luZy4KCkkgYWdyZWUsIGJ1dCBpdCBpcyB1bnJlYWxp c3RpYyB0byBjaGFuZ2UgYW55dGhpbmcgaGVyZS4gUGVvcGxlIG1ha2UgcGxheWxpc3RzIAptaXhl ZCB3aXRoIGxvY2FsIGZpbGVzIGFuZCBuZXR3b3JrIGZpbGUgc3lzdGVtcyBvciBjbG91ZCBzdG9y YWdlIHNlcnZpY2VzLiBZZXMsIAp0aGVyZSBpcyBhIHNsaWdodCBpbmZvcm1hdGlvbiBsZWFrYWdl LiBGb3IgaW5zdGFuY2UsIHlvdSBjYW4gcHJvYmUgaWYgYSBsb2NhbCAKZmlsZSBleGlzdHMgYnkg aW50ZXJsZWF2aW5nIGxvY2FsIGFuZCByZW1vdGUgVVJMcyBpbiBhIHBsYXlsaXN0LgoKSW4gcHJh Y3RpY2UsIHRoaXMgaXMgYSB3ZWxsLWtub3duIGlzc3VlIGFuZCBoYXMgYmVlbiBmb3IgdHdvIGF0 IGxlYXN0IGRlY2FkZXMsIAphbmQgdGhlICJzb2x1dGlvbiIgaXMgdG8gbGltaXQgd2hhdCB0aGUg b3BlbiBmaWxlIGNhbiBkby4gVG8gc3RhdGUgdGhlIG9idmlvdXMgCmV4dHJlbWUsIG9uZSB3b3Vs ZG4ndCB3YW50IHRvIGV4ZWN1dGUgYSBzaGVsbCBzY3JpcHQgb3IgYW4gZXhlY3V0YWJsZSBmcm9t IGEgCnBsYXlsaXN0LgoKLS0gClLDqW1pIERlbmlzLUNvdXJtb250Cmh0dHA6Ly93d3cucmVtbGFi Lm5ldC8KCgoKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18K ZmZtcGVnLWRldmVsIG1haWxpbmcgbGlzdApmZm1wZWctZGV2ZWxAZmZtcGVnLm9yZwpodHRwczov L2ZmbXBlZy5vcmcvbWFpbG1hbi9saXN0aW5mby9mZm1wZWctZGV2ZWwKClRvIHVuc3Vic2NyaWJl LCB2aXNpdCBsaW5rIGFib3ZlLCBvciBlbWFpbApmZm1wZWctZGV2ZWwtcmVxdWVzdEBmZm1wZWcu b3JnIHdpdGggc3ViamVjdCAidW5zdWJzY3JpYmUiLgo=