[FFmpeg-user] Why are absolute paths for concat unsafe?
cleyfaye at gmail.com
Fri Jan 20 17:34:05 EET 2017
2017-01-20 14:45 GMT+01:00 Shriramana Sharma <samjnaa at gmail.com>:
> But still I am not sure why exactly absolute paths are considered
> unsafe. I would like an explanation for this. Thank you!
If I remember correctly, some people used ffmpeg in tools that allowed
user input to be part of the concat file list, allowing path traversal and
other nasty stuff.
It also disallow space in names, some characters, etc.
More information about the ffmpeg-user