aiden
/
lossless-cut
mirror of https://github.com/mifi/lossless-cut
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

add doc about hardening

Browse Source
claude/ffmpeg-path-resolution-u27mfq
Mikael Finstad 2 months ago
parent 2608023489
commit 260802195b
No known key found for this signature in database
GPG Key ID: 25AB36E3E81CBC26
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File

6
docs/api.md
Unescape Escape View File

@ -12,6 +12,12 @@ To enable the API, run LosslessCut from the command line with this flag:
LosslessCut --http-api LosslessCut --http-api
``` ```
## Security
The server listens on `127.0.0.1` only, so it cannot be reached from other computers. It has no authentication, so any program running on your computer can control LosslessCut while the API is enabled.
Requests coming from a web browser are rejected with `403`, because a web page you visit must not be able to control LosslessCut. This means requests must have a `Host` header of `localhost`/`127.0.0.1` (this prevents [DNS rebinding](https://en.wikipedia.org/wiki/DNS_rebinding)) and must not have an `Origin` header (which browsers always send, but command line tools don't).
## Action endpoint: `POST /api/action/:action` ## Action endpoint: `POST /api/action/:action`
Execute a keyboard shortcut `action`, similar to the `--keyboard-action` CLI option. This is different from the CLI in that most of the actions (but not all) will wait for the action to finish before responding to the HTTP request. Execute a keyboard shortcut `action`, similar to the `--keyboard-action` CLI option. This is different from the CLI in that most of the actions (but not all) will wait for the action to finish before responding to the HTTP request.

Write Preview
Loading…
Cancel
Save