From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from ffbox0-bg.mplayerhq.hu (ffbox0-bg.ffmpeg.org [79.124.17.100]) by master.gitmailbox.com (Postfix) with ESMTP id C8C6646077 for ; Wed, 3 May 2023 19:35:58 +0000 (UTC) Received: from [127.0.1.1] (localhost [127.0.0.1]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTP id 8F6C0689975; Wed, 3 May 2023 22:35:55 +0300 (EEST) Received: from ursule.remlab.net (vps-a2bccee9.vps.ovh.net [51.75.19.47]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTP id 9D912680122 for ; Wed, 3 May 2023 22:35:49 +0300 (EEST) Received: from ursule.remlab.net (localhost [IPv6:::1]) by ursule.remlab.net (Postfix) with ESMTP id 37D85C006A for ; Wed, 3 May 2023 22:35:49 +0300 (EEST) Received: from basile.remlab.net ([2001:14ba:a080:a501:23a6:ebae:8f2a:4d73]) by ursule.remlab.net with ESMTPSA id 8BVpCpW3UmQkaSkAwZXkwQ (envelope-from ) for ; Wed, 03 May 2023 22:35:49 +0300 From: =?ISO-8859-1?Q?R=E9mi?= Denis-Courmont To: FFmpeg development discussions and patches Date: Wed, 03 May 2023 22:35:48 +0300 Message-ID: <1848811.AjfgE4jnd7@basile.remlab.net> Organization: Remlab In-Reply-To: <20230503190526.GE1391451@pb2> References: <20230502193631.10844-1-michael@niedermayer.cc> <1846772.vxqQoQgO3c@basile.remlab.net> <20230503190526.GE1391451@pb2> MIME-Version: 1.0 Subject: Re: [FFmpeg-devel] [PATCH] [RFC] avformat: Add basic same origin check X-BeenThere: ffmpeg-devel@ffmpeg.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: FFmpeg development discussions and patches List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: FFmpeg development discussions and patches Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: ffmpeg-devel-bounces@ffmpeg.org Sender: "ffmpeg-devel" Archived-At: List-Archive: List-Post: TGUga2Vza2l2aWlra29uYSAzLiB0b3Vrb2t1dXRhIDIwMjMsIDIyLjA1LjI2IEVFU1QgTWljaGFl bCBOaWVkZXJtYXllciBhIMOpY3JpdCAKOgo+IE9uIFdlZCwgTWF5IDAzLCAyMDIzIGF0IDA3OjA3 OjA5UE0gKzAzMDAsIFLDqW1pIERlbmlzLUNvdXJtb250IHdyb3RlOgo+IFRoZSBkaWZmZXJlbmNl IGlzIHdpdGggYSBkb2RneSBsaW5rIGl0cyB0aGUgd2ViIGJyb3dzZXIgdGhhdCBoYXMgdG8gcHJv dGVjdAo+IHRoZSB1c2VyLiBXaXRoIGEgZG9kZ3kgSExTIGZpbGUgaXRzIGZmbXBlZyB0aGF0IGhh cyB0byBwcm90ZWN0IHRoZSB1c2VyLgoKV2VsbCwgdGhlIGJyb3dzZXIgZG9lcyBub3QgcHJvdGVj dCB0aGUgdXNlciBpbiB0aGF0IGNhc2UuIEF0IGJlc3QsIGFuIAphbnRpbWFsd2FyZSBwbHVnaW4g b3IgcHJveHkgbWlnaHQgY2F0Y2ggaXQgYnV0IHRoYXQncyBwcmV0dHkgbXVjaCBpdC4gSW4gZmFj dCwgCm9yaWdpbiBjaGVja3MgZG9uJ3QgcHJvdGVjdCBhZ2FpbnN0IHRoaXMsIG5vciBhcmUgdGhl eSBpbnRlbmRlZCB0byAoQUZBSUspLgoKPiA+IEl0IGlzIG9idmlvdXNseSBub3QgYW4gaWRlYWwg c2l0dWF0aW9uLCBidXQgYW55IHJlc3RyaWN0aW9uIGhlcmUgd2lsbCBtb3N0Cj4gPiBkZWZpbml0 ZWx5IGJyZWFrIGV4aXN0aW5nIHVzZSBjYXNlcyAoYW5kIGxpa2VseSBiZSBhYnVzZWQgYnkgc2Vy dmVyCj4gPiBvcGVyYXRvcnMgdG8gbG9jayBGRm1wZWcgb3V0KS4KPiAKPiBNeSBnb2FsIGlzIHRv IG1ha2UgaXQgbW9yZSBzZWN1cmUgYnkgZGVmYXVsdCBhbmQgdG8ga2VlcCBpdCByZWFzb25hYmxl Cj4gY29udmVuaWVudCB0byB0aGUgdXNlcgo+IAo+IFNvIHRvIG1lIGF0IGxlYXN0LCBpZiBpIG9w ZW4gYW4gaGxzIGZpbGUgYW5kIGkgZ2V0IGEgcG9wdXAgYXNraW5nIG1lCj4gImZvb2Jhci5obHMg d2FudHMgdG8gYWNjZXNzIGh0dHA6Ly9sb2NhbGhvc3Qvc29tZWV4cGxvaXQsIgo+ICJbQWxsb3dd IFtEZW55XSBbQWxsb3cgQWx3YXlzXSBbRGVueSBBbHdheXNdIgo+IHRoYXRzIGEgd2luIGFuZCBp IHdvdWxkbnQgY2FsbCB0aGF0ICJCcmVha2luZyIgYW4gZXhpc3RpbmcgdXNlY2FzZS4KPiBOb3Ig aXMgdGhhdCBhbGxvd2luZyBhbnkgc2VydmVyIG9wZXJhdG9yIHRvIGxvY2sgRkZtcGVnIG91dAoK VXNlciBkaWFsb2d1ZXMgYXJlIG5vdG9yaW91c2x5IGJhZCBmb3Igc2VjdXJpdHkgcHVycG9zZXMs IGFzIHVzZXJzIGRvbid0IApyZWFsbHkgaGF2ZSB0aGUgbmVjZXNzYXJ5IGluZm8gdG8gbWFrZSB0 aGUgcHJvcGVyIGRlY2lzaW9uLCBhbmQganVzdCBsZWFybiB0byAKY2xpY2sgQWxsb3cgQWx3YXlz LiBBbGwgdGhleSBhY2hpZXZlIGlzIGFic29sdmUgdGhlIGRldmVsb3BlcnMgZnJvbSBwcm90ZWN0 aW5nIAp0aGUgdXNlciwgcmVhbGx5LgoKQnV0IGV2ZW4gaWYsIHdoYXQgd2lsbCB0aGUgY3JpdGVy aW9uIGJlPyBZb3UnbGwgbWF0Y2ggbG9jYWxob3N0LiBPa2F5LiBXaGF0IAphYm91dCBsb2NhbGhv c3QubG9jYWxkb21haW4gYW5kIDEyNy4wLjAuMT8gV2hhdCBhYm91dCBhbGwgdGhlIG5vbmNhbm9u aWNhbCAKd3JpdGluZ3Mgb2YgMTI3LjAuMC4xIGFuZCBvdGhlciBhZGRyZXNzZXMgaW4gMTI3LjAu MC4wLzgsIGFuZCB0aGVpciAKbm9uY2Fub25pY2FsIHdyaXRpbmc/IElQdjY/IFdoYXQgYWJvdXQg dGhlIGFzc2lnbmVkIGV4dGVybmFsIElQIGFkZHJlc3Mgb2YgdGhlIApob3N0IEFuZCBzbyBvbiwg YW5kIHRoYXQncyBqdXN0IHRvIHByZXZlbnQgY29ubmVjdGlvbnMgdG8gbG9jYWxob3N0LgoKU29t ZSBicm93c2VycyBwcmV2ZW50IGNvbm5lY3Rpb25zIHRvIHByaXZhdGUgSVAgYWRkcmVzc2VzIHRv bywgdG8gInByb3RlY3QiIAp0aGUgSW50cmFuZXQsIGJ1dCB0aGUgZmxpcCBzaWRlIGlzIHRvIGJy ZWFrIGNvcnBvcmF0ZSBjb250ZW50IGFuZCBob21lIGZpbGUgCnNlcnZlcnMuCgo+IElmIHdlIGNh biBtYWtlIHRoaXMgbW9yZSBjb252ZW5pZW50IHRvIHRoZSB1c2VyIHdoaWxlIGtlZXBpbmcgaXQg c2VjdXJlIHdlCj4gc2hvdWxkLiBCdXQgd2Ugc2hvdWxkIG5vdCBtYWtlIGl0IG1vcmUgY29udmVu aWVudCB0aGFuIHdoYXQgY2FuIGJlIGRvbmUKPiBzZWN1cmVseS4KCkkgYXBwcmVjaWF0ZSB0aGUg dGhvdWdodCBidXQgd2l0aG91dCBhIGNsZWFybHkgZGVmaW5lZCB0aHJlYXQgbW9kZWwsIHlvdSBj YW4ndCAKZGVmaW5lIHRoZSBzZWN1cml0eSBpc3N1ZSwgYW5kIHRodXMgeW91IGNhbid0IGhvcGUg dG8gZml4IGl0LiBNZWFud2hpbGUsIHlvdSAKd2lsbCBicmVhayB0aGluZ3MsIGFuZCBpZiB5b3Un cmUgbm90IGNhcmVmdWwsIHlvdSBtaWdodCBhcyB3ZWxsIG1ha2UgaXQgZWFzaWVyIApmb3IgcHVi bGlzaGVycyB0byBkZWxpYmVyYXRlbHkgYmxvY2sgRkZtcGVnLgoKPiBJZiB5b3UgaGF2ZSBhIGhs cyBmaWxlIHRoYXQgbWl4ZXMgbG9jYWwgZmlsZXMgYW5kIHJlbW90ZSBodHRwKHMpIHRoZW4geW91 Cj4gbmVlZCB0byBvdmVycmlkZSB0aGUgZGVmYXVsdCBwcm90b2NvbCB3aGl0ZWxpc3QuCgpJdCBt YWtlcyBzZW5zZSBmb3IgSExTIG1hbmlmZXN0cyBiZWNhdXNlIEhMUyBpcyBieSBkZWZpbml0aW9u IHRpZWQgdG8gSFRUUCwgYnV0IAp0aGF0IHdvbid0IHdvcmsgZm9yIHJlYWwgcGxheWxpc3RzIChN M1Ugb3Igb3RoZXIpLgoKLS0gCuODrOODn+ODu+ODh+ODiy3jgq/jg7zjg6vjg6Ljg7MKaHR0cDov L3d3dy5yZW1sYWIubmV0LwoKCgpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fXwpmZm1wZWctZGV2ZWwgbWFpbGluZyBsaXN0CmZmbXBlZy1kZXZlbEBmZm1wZWcu b3JnCmh0dHBzOi8vZmZtcGVnLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2ZmbXBlZy1kZXZlbAoKVG8g dW5zdWJzY3JpYmUsIHZpc2l0IGxpbmsgYWJvdmUsIG9yIGVtYWlsCmZmbXBlZy1kZXZlbC1yZXF1 ZXN0QGZmbXBlZy5vcmcgd2l0aCBzdWJqZWN0ICJ1bnN1YnNjcmliZSIuCg==