> 2020年4月27日 下午7:22，Nicolas George <geo...@nsup.org> 写道： > > Steven Liu (12020-04-27): >> /../../../../../other/url, this is the absolute path, so just concat and >> don’t process, >> Or what do you want to say? > > This is not an absolute path, since it contains "..". I think it is a > problem that the output of ff_make_absolute_url() is not, you know, > absolute. > > It can even be considered a security issue, since other parts of the > code could assume that the output of ff_make_absolute_url() is actually > absolute. I need one example to understand about the security issue after this patch.
Thanks Steven Liu _______________________________________________ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-devel To unsubscribe, visit link above, or email ffmpeg-devel-requ...@ffmpeg.org with subject "unsubscribe".
