From 14a03d6a777e76af6674940da42f1ec377c3bc10 Mon Sep 17 00:00:00 2001
From: Marco Piovanello <35533749+marcopiovanello@users.noreply.github.com>
Date: Wed, 23 Jul 2025 10:21:34 +0200
Subject: [PATCH] Prevent RCEs with crafted inputs

---
 server/internal/process.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/server/internal/process.go b/server/internal/process.go
index 1ba1f54..cffd51d 100644
--- a/server/internal/process.go
+++ b/server/internal/process.go
@@ -100,6 +100,7 @@ func (p *Process) Start() {
 		templateReplacer.Replace(downloadTemplate),
 		"--progress-template",
 		templateReplacer.Replace(postprocessTemplate),
+		"--no-exec",
 	}
 
 	// if user asked to manually override the output path...