mirrors/git-annex
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages 1 Wiki Activity Actions

default to not using youtube-dl, for security

Browse source 
Pity, but same reasoning as curl applies to it.

This commit was sponsored by Peter on Patreon.
This commit is contained in:
Joey Hess 2018-06-17 14:46:22 -04:00
parent 563f2f5a81
commit e62c4543c3
No known key found for this signature in database
GPG key ID: DB12DB0FF05F8F38
9 changed files with 66 additions and 21 deletions
Download patch file Download diff file Expand all files Collapse all files

9
NEWS
View file

@ -7,14 +7,15 @@ git-annex (6.20180622) upstream; urgency=high
A related security fix prevents git-annex from connecting to http
servers on localhost or private networks. This can be overridden,
at your own risk, using annex.security.allowed-http-addresses.
Setting annex.web-options no longer is enough to make curl be used,
and youtube-dl is also no longer used by default. See the
documentation of annex.security.allowed-http-addresses for
details and how to enable them.
The annex.web-download-command configuration has been removed,
use annex.web-options instead.
Setting annex.web-options no longer is enough to make curl be used.
See the documentation of annex.security.allowed-http-addresses for
why and how to enable curl.
-- Joey Hess <id@joeyh.name> Fri, 15 Jun 2018 17:54:23 -0400
git-annex (6.20180309) upstream; urgency=medium