Skip to content

Conversation

@gaaf
Copy link

@gaaf gaaf commented Aug 7, 2025

The download routine had the target folder hardcoded to "_youtube", not respecting the ytPath variable in conf.ts.

Fix this by propagating the configured folder to the downloader.

Limit it to a single, non-relative, folder for safety. Probably still not very secure, but as I know next to nothing about nodejs, I saw no other means to respect the ytPath variable.

The download routine had the target folder hardcoded to "_youtube", not
respecting the ytPath variable in conf.ts.

Fix this by propagating the configured folder to the downloader.

Limit it to a single, non-relative, folder for safety.
@gaaf gaaf force-pushed the use-configured-ytpath branch from 5675945 to 5e7d738 Compare August 7, 2025 11:55
@ondras
Copy link
Owner

ondras commented Aug 7, 2025

I am currently on a vacation until the end of August. Acknowledging the issue, will look into it when I come back.

As far as I remember, the URLSearchParams interface performs necessary escaping automatically (also, escape is probably incorrect; the right one would be encodeURIComponent).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants