Hacker News new | ask | show | jobs
by pabs3 1383 days ago
Would you mind switching to subprocess with shell=False? os.popen is obsolete and insecure because it passes the command through the shell.

PS: I found it quite easy to contribute to yt-dlp and the reviewers are ultra-helpful and kind, you might want to migrate all of your extractors there.

1 comments

1. It's ancient code but sure

2. They're fundamentally not compatible approaches. This is worthless to them