[MPlayer-dev-eng] Playlist recognition

Ingo Brückl ib at wupperonline.de
Thu Sep 29 14:10:42 CEST 2011


Reimar Döffinger wrote on Sun, 5 Jun 2011 14:16:42 +0200:

> On Sun, Jun 05, 2011 at 02:02:18PM +0200, Ingo Brückl wrote:
>> Is there a special reason for commenting
>>
>>   //        { "pls", DEMUXER_TYPE_PLAYLIST },
>>   //        { "m3u", DEMUXER_TYPE_PLAYLIST },
>>
>> in libmpdemux\extension.c?

> Yes, playlists can be used for all kinds of mischief ("pinging" a
> certain website for user tracking, trying to play certain /dev
> things and combining with that to detect what kind of hardware
> is installed in a PC, if there is a DVD in the driver, maybe even
> other things - anything that can be triggered by reading/trying to play
> an arbitrary file and being able to time that) and thus should not
> be enable without user consent, at least when the playlist comes
> from an untrusted source.

I see. But why are MOV reference files allowed then?

Ingo


More information about the MPlayer-dev-eng mailing list