ZJZAC ad83a32283 security: block extra_args from bypassing codec allowlist ...

extra_args could pass vcodec=..., acodec=..., or -consumer to override
the validated codec parameters. Add _validate_extra_args() that rejects
any argument starting with these prefixes.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-18 16:50:38 +08:00

..

cli_anything/shotcut

security: block extra_args from bypassing codec allowlist

2026-03-18 16:50:38 +08:00

examples

first commit

2026-03-08 21:58:43 +08:00

HARNESS.md

first commit

2026-03-08 21:58:43 +08:00

setup.py

refactor: move SKILL.md inside Python package for pip install support

2026-03-16 09:06:31 +00:00

SHOTCUT.md

first commit

2026-03-08 21:58:43 +08:00

TEST.md

first commit

2026-03-08 21:58:43 +08:00

workflow_demo.py

first commit

2026-03-08 21:58:43 +08:00