pax 5858c274c8 security: fix #2 — set lavf options on _MpvGLWidget after construction ...

Calls lavf_options() post mpv.MPV() init and writes each entry into
the demuxer-lavf-o property. This is the consumer side of the split
helpers introduced in the previous commit. Verified end-to-end by
launching the GUI: mpv constructs cleanly and m['demuxer-lavf-o']
reads back as {'protocol_whitelist': 'file,http,https,tls,tcp'}.

Audit-Ref: SECURITY_AUDIT.md finding #2
Severity: High

2026-04-11 16:34:57 -05:00

..

__init__.py

Move VIDEO_EXTENSIONS + _is_video from preview.py to media/constants.py (no behavior change)

2026-04-08 13:46:27 -05:00

_mpv_options.py

security: fix #2 — apply lavf protocol whitelist via property API

2026-04-11 16:34:50 -05:00

constants.py

Move VIDEO_EXTENSIONS + _is_video from preview.py to media/constants.py (no behavior change)

2026-04-08 13:46:27 -05:00

image_viewer.py

F11 round-trip: preserve image zoom/pan + popout window position

2026-04-08 16:19:35 -05:00

mpv_gl.py

security: fix #2 — set lavf options on _MpvGLWidget after construction

2026-04-11 16:34:57 -05:00

video_player.py

video controls: 1x icon, responsive layout, EOF replay, autoplay icon fix

2026-04-10 21:09:49 -05:00