From f7539d8abf2e40e1464180f60644b75ebadb7c0e Mon Sep 17 00:00:00 2001
From: Marco Piovanello <35533749+marcopiovanello@users.noreply.github.com>
Date: Wed, 23 Jul 2025 10:16:40 +0200
Subject: [PATCH] prevent RCEs with crafted video files urls

---
 server/internal/process.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/server/internal/process.go b/server/internal/process.go
index 1ba1f54..4c73b0b 100644
--- a/server/internal/process.go
+++ b/server/internal/process.go
@@ -93,6 +93,7 @@ func (p *Process) Start() {
 
 	baseParams := []string{
 		strings.Split(p.Url, "?list")[0], //no playlist
+		"--no-exec",
 		"--newline",
 		"--no-colors",
 		"--no-playlist",