prevent RCEs with crafted video files urls

2025-07-23 10:16:40 +02:00
1 changed files with 1 additions and 0 deletions
--- a/server/internal/process.go
+++ b/server/internal/process.go
@@ -93,6 +93,7 @@ func (p *Process) Start() {

 	baseParams := []string{
 		strings.Split(p.Url, "?list")[0], //no playlist
+		"--no-exec",
 		"--newline",
 		"--no-colors",
 		"--no-playlist",