From 910245061e2c6b4fbf76429b61ecd94e7e4599e9 Mon Sep 17 00:00:00 2001
From: mykola2312 <nikolay_tihonov@i.ua>
Date: Wed, 21 Feb 2024 22:38:24 +0200
Subject: [PATCH] there is vulnerability related to argument injection

---
 src/dl/yt_dlp.rs | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/dl/yt_dlp.rs b/src/dl/yt_dlp.rs
index 491de3e..ce59326 100644
--- a/src/dl/yt_dlp.rs
+++ b/src/dl/yt_dlp.rs
@@ -167,6 +167,7 @@ impl fmt::Display for YtDlpError {
 
 pub struct YtDlp {}
 
+// BUG: REAL ARGUMENT INJECTION! FIX ASAP
 impl YtDlp {
     pub async fn load_info(url: &str) -> Result<YtDlpInfo, YtDlpError> {
         let output = spawn("python", ["-m", "yt_dlp", url, "-j"]).await?;