Simon Sawicki 1fbbe29b99 [ie] Limit netrc_machine parameter to shell-safe characters ...

Also adapts some extractor regexes to adhere to this limitation

See: https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-g3gw-q23r-pgqm

Authored by: Grub4K

2026-02-21 21:07:36 +01:00

..

__pyinstaller

[ie/youtube] Implement external n/sig solver (#14157)

2025-10-31 23:13:04 +01:00

compat

Remove Python 3.9 support (#13861)

2025-10-15 10:25:21 +00:00

dependencies

[ie/youtube] Implement external n/sig solver (#14157)

2025-10-31 23:13:04 +01:00

downloader

[ie/soop] Support subscription-only VODs (#15523)

2026-01-30 00:25:58 +00:00

extractor

[ie] Limit netrc_machine parameter to shell-safe characters

2026-02-21 21:07:36 +01:00

networking

[rh:curl_cffi] Deprioritize unreliable impersonate targets (#16018)

2026-02-20 23:48:16 +00:00

postprocessor

Fix --parse-metadata when TO is a single field name (#14577)

2026-01-05 03:19:30 +00:00

utils

[ie/visir] Add extractor (#15811)

2026-02-04 15:33:00 +00:00

__init__.py

[ie/youtube] Implement external n/sig solver (#14157)

2025-10-31 23:13:04 +01:00

__main__.py

…

aes.py

Remove Python 3.9 support (#13861)

2025-10-15 10:25:21 +00:00

cache.py

…

cookies.py

[cookies] Ignore cookies with control characters (#15862)

2026-02-16 19:59:34 +00:00

globals.py

[ie/youtube] Implement external n/sig solver (#14157)

2025-10-31 23:13:04 +01:00

jsinterp.py

[jsinterp] Support string concatenation with + and += (#15990)

2026-02-17 23:46:20 +00:00

minicurses.py

…

options.py

[ie/tver:olympic] Add extractor (#15885)

2026-02-09 20:56:39 +00:00

plugins.py

Remove Python 3.9 support (#13861)

2025-10-15 10:25:21 +00:00

socks.py

…

update.py

[update] Fix PyInstaller onedir variant detection (#14800)

2025-10-27 23:21:38 +00:00

version.py

Release 2026.02.04

2026-02-04 00:31:48 +00:00

webvtt.py

Remove Python 3.9 support (#13861)

2025-10-15 10:25:21 +00:00

YoutubeDL.py

Fix concurrent formats downloading to stdout (#15617)

2026-01-28 03:57:09 +00:00