From cac2a020bc3d17e589928c777a1ad3375ac61014 Mon Sep 17 00:00:00 2001
From: mykola2312 <49044616+mykola2312@users.noreply.github.com>
Date: Wed, 21 Feb 2024 22:38:24 +0200
Subject: [PATCH] there is vulnerability related to argument injection

---
 src/dl/yt_dlp.rs | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/dl/yt_dlp.rs b/src/dl/yt_dlp.rs
index 491de3e..ce59326 100644
--- a/src/dl/yt_dlp.rs
+++ b/src/dl/yt_dlp.rs
@@ -167,6 +167,7 @@ impl fmt::Display for YtDlpError {
 
 pub struct YtDlp {}
 
+// BUG: REAL ARGUMENT INJECTION! FIX ASAP
 impl YtDlp {
     pub async fn load_info(url: &str) -> Result<YtDlpInfo, YtDlpError> {
         let output = spawn("python", ["-m", "yt_dlp", url, "-j"]).await?;