[fd/external] curl: Fix cookie leak on redirect

See https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-f7j3-774f-rfhj

Authored by: Grub4K
This commit is contained in:
Simon Sawicki
2026-06-10 00:40:01 +02:00
parent e578e265f7
commit 2726572520
3 changed files with 154 additions and 26 deletions
+4 -2
View File
@@ -915,10 +915,12 @@ class Popen(subprocess.Popen):
self.wait(timeout=timeout)
@classmethod
def run(cls, *args, timeout=None, **kwargs):
def run(cls, *args, timeout=None, input=None, **kwargs):
if input is not None and kwargs.get('stdin') is None:
kwargs['stdin'] = subprocess.PIPE
with cls(*args, **kwargs) as proc:
default = '' if proc.__text_mode else b''
stdout, stderr = proc.communicate_or_kill(timeout=timeout)
stdout, stderr = proc.communicate_or_kill(input=input, timeout=timeout)
return stdout or default, stderr or default, proc.returncode