[MPlayer-dev-eng] [PATCH] demux_lavf: add urlprefix suboption.

[Reimar Döffinger]

On Mon, Apr 29, 2013 at 05:15:20PM +0200, Nicolas George wrote:
> > That said if you want it, I'd suggest a bool option described something
> > like "allow FFmpeg to access file directly". I admit I didn't think it
> > through too well though.
> 
> If there is no advert effect, since the "mp:" protocol will never come, just
> removing the prefix would be even simpler.

Yes there is an adverse effect, that it allows access to files that
should not be accessed.
Whether this is /dev/cdrom or /dev/modem or similar stuff.
FFmpeg doesn't care but I still consider the FFmpeg's linked file
support quite a security risk and the main reason why the mp: prefix
is still there even though the protocol is gone.
There is not any API to filter allowed file names for example either in
FFmpeg.