Patch youtube-dl to disable redirects

In order to prevent SSRF attacks using redirects
Rudloff · Feb 27, 2022 · 1b099bb · 1b099bb
1 parent 3a4f09d
commit 1b099bb
Show file tree

Hide file tree

Showing 3 changed files with 1,088 additions and 91 deletions.
diff --git a/composer.json b/composer.json
@@ -25,6 +25,7 @@
     "aura/session": "^2.1",
     "barracudanetworks/archivestream-php": "^1.0",
     "consolidation/log": "^2.0",
+    "cweagans/composer-patches": "^1.7",
     "j0k3r/httplug-ssrf-plugin": "^2.0",
     "jawira/case-converter": "^3.4",
     "jean85/pretty-package-versions": "^1.3",
@@ -74,7 +75,12 @@
     },
     "installer-types": [
       "library"
-    ]
+    ],
+    "patches": {
+      "ytdl-org/youtube-dl": {
+        "Disable redirects in generic extractor": "patches/youtube-dl-redirect.diff"
+      }
+    }
   },
   "autoload": {
     "psr-4": {