Disable the generic extractor entirely

It can be used for SSRF attacks even when redirects are disabled
This commit is contained in:
Pierre Rudloff 2022-03-08 09:29:57 +01:00
parent 148a171b24
commit 8913f27716
4 changed files with 18 additions and 18 deletions

View file

@ -0,0 +1,12 @@
diff --git a/youtube_dl/extractor/__init__.py b/youtube_dl/extractor/__init__.py
index 18d8dbcd6..4d3edfac3 100644
--- a/youtube_dl/extractor/__init__.py
+++ b/youtube_dl/extractor/__init__.py
@@ -13,7 +13,6 @@ except ImportError:
for name, klass in globals().items()
if name.endswith('IE') and name != 'GenericIE'
]
- _ALL_CLASSES.append(GenericIE)
def gen_extractor_classes():