[FFmpeg-devel] [PATCH 3/3] avformat: set the default whitelist to disable hls

Hendrik Leppkes h.leppkes at gmail.com
Tue Jun 6 07:55:06 EEST 2017

On Tue, Jun 6, 2017 at 4:59 AM, Michael Niedermayer
<michael at niedermayer.cc> wrote:
>> The issue is about subsets of the URL space. Files from one URL should
>> be allowed to access data from URLs in the same relevant subset (same
>> subdirectory or same web server maybe?), but not outside.
> What percentage of hls files out in the wild does this work with ?

If you implement this over HTTP, you also need to implement CORS
(Cross Origin Resouce Sharing), which is a defined mechanism to break
these static rules when you need/want to load content from other
Many web-based HLS players basically require this so the browser can
access the files.

- Hendrik

More information about the ffmpeg-devel mailing list