1
0
mirror of https://github.com/yt-dlp/yt-dlp.git synced 2024-12-30 02:21:13 +01:00
yt-dlp/test
Filippo Valsorda 4d318be195 [update] fix (unexploitable) BB'06 vulnerability in rsa_verify
The rsa_verify code was vulnerable to a BB'06 attack, allowing to forge
signatures for arbitrary messages if and only if the public key exponent is
3.  Since the updates key is hardcoded to 65537, there is no risk for
youtube-dl, but I don't want vulnerable code in the wild.

The new function adopts a way safer approach of encoding-and-comparing to
replace the dangerous parsing code.
2016-01-21 20:12:17 +00:00
..
swftests [swfinterp] Add more builtins and improve static variables 2014-11-17 07:54:06 +01:00
__init__.py
helper.py [test/helper] Fix style 2015-10-02 13:42:11 +02:00
parameters.json Remove the --max-quality option 2015-04-25 11:59:54 +02:00
test_aes.py [test/aes] Fix on python 3.3 and higher 2015-06-03 23:50:38 +02:00
test_age_restriction.py [test_age_restriction] remove misbehaving test 2015-01-08 18:03:29 +01:00
test_all_urls.py [test/test_all_urls] Update pbs extractor name 2015-12-08 21:12:13 +01:00
test_cache.py
test_compat.py [compat] compat_etree_fromstring: also decode the text attribute 2015-10-26 16:41:24 +01:00
test_download.py [test/test_download] Use extract_flat = 'in_playlist' for playlist items 2015-10-23 14:12:46 +02:00
test_execution.py [test_execution] Fix test under python 2 @ windows 2015-04-04 19:21:50 +06:00
test_http.py [test/http] Add test for proxy support 2015-03-20 14:59:38 +01:00
test_InfoExtractor.py [extractor/common] Allow angle brackets in attributes in _og_regexes (#7215) 2015-10-18 09:11:02 +06:00
test_jsinterp.py [jsinterp] Support alternative function definition form 2015-11-10 12:54:02 +08:00
test_netrc.py Make sure netrc works for all extractors with login support 2015-03-03 12:59:17 +01:00
test_postprocessors.py [metadatafromtitle] Some improvements and cleanup 2015-03-14 20:06:33 +01:00
test_subtitles.py [test_subtitles] remove BlipTV test 2015-12-21 16:52:47 +01:00
test_swfinterp.py PEP8: W503 2015-02-21 14:55:13 +01:00
test_unicode_literals.py [test/unicode_literals] Don't look into the .git and .tox directories 2015-03-14 20:25:37 +01:00
test_update.py [update] fix (unexploitable) BB'06 vulnerability in rsa_verify 2016-01-21 20:12:17 +00:00
test_utils.py [test_utils] Add tests for encode_compat_str 2015-12-20 07:07:14 +06:00
test_write_annotations.py Fix typos 2016-01-10 17:24:28 +01:00
test_youtube_lists.py [test_youtube_lists] Add test flat playlist entries' titles 2015-10-18 00:27:06 +06:00
test_youtube_signature.py [jsinterp] Disable comment support 2015-02-18 10:47:42 +01:00
test_YoutubeDL.py [YoutubeDL] urlopen: disable the 'file:' protocol (#8227) 2016-01-14 00:24:04 +01:00
testcert.pem Add a test for --no-check-certificate 2015-01-30 02:57:37 +01:00
versions.json [update] fix (unexploitable) BB'06 vulnerability in rsa_verify 2016-01-21 20:12:17 +00:00