[MPlayer-DOCS] r36241 - trunk/DOCS/man/en/mplayer.1
reimar
subversion at mplayerhq.hu
Sun May 5 19:02:35 CEST 2013
Author: reimar
Date: Sun May 5 19:02:35 2013
New Revision: 36241
Log:
manpage: document -playlist being unsafe in its option description
This really should have been added to the manpage at the start of the
previous decade. There's still bad advice about -playlist in the XML
docs, but I'll remove that later when purging more obsolete/wrong
stuff from there.
Patch by Uoti Urpala [uau mplayer2 org]
Modified:
trunk/DOCS/man/en/mplayer.1
Modified: trunk/DOCS/man/en/mplayer.1
==============================================================================
--- trunk/DOCS/man/en/mplayer.1 Sun May 5 19:02:33 2013 (r36240)
+++ trunk/DOCS/man/en/mplayer.1 Sun May 5 19:02:35 2013 (r36241)
@@ -1283,6 +1283,15 @@ Expand TEXT only if the property NAME is
Play files according to a playlist file (ASX, Winamp, SMIL, or
one-file-per-line format).
.br
+.I WARNING:
+The way MPlayer parses and uses playlist files is not safe against
+maliciously constructed files.
+Such files may trigger harmful actions.
+This has been the case for all MPlayer versions, but unfortunately this
+fact was not well documented earlier, and some people have even misguidedly
+recommended use of -playlist with untrusted sources.
+Do NOT use -playlist with random internet sources or files you don't trust!
+.br
.I NOTE:
This option is considered an entry so options found after it will apply
only to the elements of this playlist.
More information about the MPlayer-DOCS
mailing list