[MPlayer-DOCS] r36241 - trunk/DOCS/man/en/mplayer.1
subversion at mplayerhq.hu
Sun May 5 19:02:35 CEST 2013
Date: Sun May 5 19:02:35 2013
New Revision: 36241
manpage: document -playlist being unsafe in its option description
This really should have been added to the manpage at the start of the
previous decade. There's still bad advice about -playlist in the XML
docs, but I'll remove that later when purging more obsolete/wrong
stuff from there.
Patch by Uoti Urpala [uau mplayer2 org]
--- trunk/DOCS/man/en/mplayer.1 Sun May 5 19:02:33 2013 (r36240)
+++ trunk/DOCS/man/en/mplayer.1 Sun May 5 19:02:35 2013 (r36241)
@@ -1283,6 +1283,15 @@ Expand TEXT only if the property NAME is
Play files according to a playlist file (ASX, Winamp, SMIL, or
+The way MPlayer parses and uses playlist files is not safe against
+maliciously constructed files.
+Such files may trigger harmful actions.
+This has been the case for all MPlayer versions, but unfortunately this
+fact was not well documented earlier, and some people have even misguidedly
+recommended use of -playlist with untrusted sources.
+Do NOT use -playlist with random internet sources or files you don't trust!
This option is considered an entry so options found after it will apply
only to the elements of this playlist.
More information about the MPlayer-DOCS