Fix --exec placeholder expansion on Windows

See https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-45hg-7f49-5h56 for more details

Authored by: Grub4K
This commit is contained in:
Simon Sawicki
2025-07-15 01:17:34 +02:00
committed by bashonly
parent d88b304d44
commit 959ac99e98

View File

@@ -18,7 +18,7 @@ class ExecPP(PostProcessor):
if filepath:
if '{}' not in cmd:
cmd += ' {}'
cmd = cmd.replace('{}', shell_quote(filepath))
cmd = cmd.replace('{}', shell_quote(filepath, shell=True))
return cmd
def run(self, info):