booru-viewer/booru_viewer
pax 5858c274c8 security: fix #2 — set lavf options on _MpvGLWidget after construction
Calls lavf_options() post mpv.MPV() init and writes each entry into
the demuxer-lavf-o property. This is the consumer side of the split
helpers introduced in the previous commit. Verified end-to-end by
launching the GUI: mpv constructs cleanly and m['demuxer-lavf-o']
reads back as {'protocol_whitelist': 'file,http,https,tls,tcp'}.

Audit-Ref: SECURITY_AUDIT.md finding #2
Severity: High
2026-04-11 16:34:57 -05:00
..
core security: fix #14 — cap category_fetcher HTML body before regex walk 2026-04-11 16:26:00 -05:00
gui security: fix #2 — set lavf options on _MpvGLWidget after construction 2026-04-11 16:34:57 -05:00
__init__.py Initial release — booru image viewer with Qt6 GUI and Textual TUI 2026-04-04 06:00:50 -05:00
main_gui.py Drop refactor re-export shims, update imports to canonical locations 2026-04-08 15:08:40 -05:00