
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
XY-player is a media web-player for m3u8 playlist with ability to choose audio and quality tracks included in master m3u8 playlist file, as well as to choose from season and episode provided to it.
XY-Player is a media web-player based on Videojs and HLS-quality-selector
npm install xy-player
or via direct downloading files inside dist/ directory<link rel="stylesheet" href="css/xy-player-styles.min.css">
<script src="xy-player.min.js"></script>
<div class="top-control-bar">
<!-- Controls will be dynamically inserted here -->
</div>
<div class="report-container">
<!-- Report elements will be dynamically inserted here -->
</div>
const videoID = "player";
const videojsPlayer = videojs(videoID);
XYPlayerStart(videojsPlayer);
For some reason on my machine - m3u8 playlist can change quality only when I'm following manifest options exactly as in example of manifests of .m3u8 files. Very similar to this issue
addSeason(seasonID, textContent) void
Adds a season to the SEASONS table.
addEpisode(episodeID, textContent, seasonID, location) void
Adds an episode to the EPISODES table.
addIssue(issueID, value, label) void
Adds an issue to the ISSUES table for reporting.
addSubtitle(episodeID, seasonID, subtitlesID, location, lang, label) void
Adds subtitles to the SUBTITLES table.
resetControls() void
Deletes everything loaded inside the divs and reloads them.
getSeasons() Array<{ seasonID: number, textContent: string }>
Returns an array of SEASONS.
getEpisodes() Array<{ episodeID: number, textContent: string, seasonID: number, location: string }>
Returns an array of EPISODES.
getIssues() Array<{ issueID: number, value: string, label: string }>
Returns an array of ISSUES.
getSubtitles() Array<{ episodeID: number, seasonID: number, subtitlesID: number, location: string, lang: string, label: string }>
Returns an array of SUBTITLES.
removeSubtitleByID(subtitleID) void
Removes a subtitle from the SUBTITLES table based on the given subtitleID
.
removeIssueByID(issueID) void
Removes an issue from the ISSUES table based on the provided issueID
.
removeSeasonByID(seasonID) void
Removes a season from the SEASONS table based on the provided seasonID
.
removeEpisodeByID(episodeID) void
Removes an episode from the EPISODES table based on the provided episodeID
.
removeSubtitle(index) void
Removes a subtitle from the SUBTITLES table at the specified index
.
removeIssue(index) void
Removes an issue from the ISSUES table at the specified index
.
removeSeason(index) void
Removes a season from the SEASONS table at the specified index
.
removeEpisode(index) void
Removes an episode from the EPISODES table at the specified index
.
MIT. Copyright (c) Andrei Danilov (andreidanilov0440@outlook.com)
FAQs
XY-player is a media web-player for m3u8 playlist with ability to choose audio and quality tracks included in master m3u8 playlist file, as well as to choose from season and episode provided to it.
We found that xy-player demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.