[vlc-devel] Why is VLM using stream_UrlNew?

[Rémi Denis-Courmont]

	Hello,

VLM is currently using VLC stream_* to read the configuration file. I, hmm, 
wonder if there is really a use case for reading a VLM script anywhere but 
from the filesystem.

This is normally not a security problem per se. Users can simply not 
run "vlc --vlm-conf http://www.haxors.com/". Still, it does not seem like a 
terrible idea to me.

I would propose replacing stream_* with regular <stdio.h> FILE functions, 
unless someone has a real use case for this (mis?)feature.

Regards,

-- 
Rémi Denis-Courmont
http://www.remlab.net/