Filippo Valsorda 4d318be195 [update] fix (unexploitable) BB'06 vulnerability in rsa_verify ... The rsa_verify code was vulnerable to a BB'06 attack, allowing to forge signatures for arbitrary messages if and only if the public key exponent is 3. Since the updates key is hardcoded to 65537, there is no risk for youtube-dl, but I don't want vulnerable code in the wild. The new function adopts a way safer approach of encoding-and-comparing to replace the dangerous parsing code.		2016-01-21 20:12:17 +00:00
..
swftests	…
__init__.py	…
helper.py	[test/helper] Fix style	2015-10-02 13:42:11 +02:00
parameters.json	Remove the --max-quality option	2015-04-25 11:59:54 +02:00
test_InfoExtractor.py	[extractor/common] Allow angle brackets in attributes in _og_regexes (#7215)	2015-10-18 09:11:02 +06:00
test_YoutubeDL.py	[YoutubeDL] urlopen: disable the 'file:' protocol (#8227)	2016-01-14 00:24:04 +01:00
test_aes.py	[test/aes] Fix on python 3.3 and higher	2015-06-03 23:50:38 +02:00
test_age_restriction.py	[test_age_restriction] remove misbehaving test	2015-01-08 18:03:29 +01:00
test_all_urls.py	[test/test_all_urls] Update pbs extractor name	2015-12-08 21:12:13 +01:00
test_cache.py	…
test_compat.py	[compat] compat_etree_fromstring: also decode the text attribute	2015-10-26 16:41:24 +01:00
test_download.py	[test/test_download] Use extract_flat = 'in_playlist' for playlist items	2015-10-23 14:12:46 +02:00
test_execution.py	[test_execution] Fix test under python 2 @ windows	2015-04-04 19:21:50 +06:00
test_http.py	[test/http] Add test for proxy support	2015-03-20 14:59:38 +01:00
test_jsinterp.py	[jsinterp] Support alternative function definition form	2015-11-10 12:54:02 +08:00
test_netrc.py	Make sure netrc works for all extractors with login support	2015-03-03 12:59:17 +01:00
test_postprocessors.py	[metadatafromtitle] Some improvements and cleanup	2015-03-14 20:06:33 +01:00
test_subtitles.py	[test_subtitles] remove BlipTV test	2015-12-21 16:52:47 +01:00
test_swfinterp.py	PEP8: W503	2015-02-21 14:55:13 +01:00
test_unicode_literals.py	[test/unicode_literals] Don't look into the .git and .tox directories	2015-03-14 20:25:37 +01:00
test_update.py	[update] fix (unexploitable) BB'06 vulnerability in rsa_verify	2016-01-21 20:12:17 +00:00
test_utils.py	[test_utils] Add tests for encode_compat_str	2015-12-20 07:07:14 +06:00
test_write_annotations.py	Fix typos	2016-01-10 17:24:28 +01:00
test_youtube_lists.py	[test_youtube_lists] Add test flat playlist entries' titles	2015-10-18 00:27:06 +06:00
test_youtube_signature.py	[jsinterp] Disable comment support	2015-02-18 10:47:42 +01:00
testcert.pem	Add a test for --no-check-certificate	2015-01-30 02:57:37 +01:00
versions.json	[update] fix (unexploitable) BB'06 vulnerability in rsa_verify	2016-01-21 20:12:17 +00:00