[vlc-devel] commit: Don't ignore-config on the webplugin (Jean-Baptiste Kempf )

Rémi Denis-Courmont remi at remlab.net
Fri Oct 2 11:59:24 CEST 2009


On Fri, 2 Oct 2009 12:32:21 +0300, "Kaloyan Kovachev" <kkovachev at varna.net>
wrote:
> Hello,
>  isn't it possible to have separate config/section for the web plugins
> with
> only the safe options?

It happens to be a security issue too, if the user has "dangerous" values
in the VLC configuration (e.g. permanent --sout).
But most importantly, it's a functional issue. Just about every used
options that is actually read by the web plugin can screw things up, if the
webmaster relied on the default value.

It all comes down to: default settings MUST work. No ifs. No buts. Full
point.

-- 
Rémi Denis-Courmont




More information about the vlc-devel mailing list