[FFmpeg-devel] [PATCH 3/3] avformat: set the default whitelist to disable hls

[Hendrik Leppkes]

On Tue, Jun 6, 2017 at 4:59 AM, Michael Niedermayer
<michael at niedermayer.cc> wrote:
>>
>> The issue is about subsets of the URL space. Files from one URL should
>> be allowed to access data from URLs in the same relevant subset (same
>> subdirectory or same web server maybe?), but not outside.
>
> What percentage of hls files out in the wild does this work with ?
>
>

If you implement this over HTTP, you also need to implement CORS
(Cross Origin Resouce Sharing), which is a defined mechanism to break
these static rules when you need/want to load content from other
domains.
Many web-based HLS players basically require this so the browser can
access the files.

- Hendrik