You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
If uri contents //, the used URI is a reconstruction of obj_uri.scheme + "://" + obj_uri.netloc + obj_uri.path
But youtube pass the video id in params, so the md5 generated for all youtube videos is exactly the same because it doesn't take into account the query.
There is a collision when generating md5 hash of URI when website use query for parameters
Example of a parsed "Cochonnet" youtube video.
If uri contents //, the used URI is a reconstruction of
obj_uri.scheme + "://" + obj_uri.netloc + obj_uri.path
But youtube pass the video id in params, so the md5 generated for all youtube videos is exactly the same because it doesn't take into account the
query
.Here are all line where I found the bug:
cybersecurity-dfm/utils/dfmtelegrambot.py
Line 53 in 03bd533
cybersecurity-dfm/dfm/server.py
Line 90 in 9b78c22
cybersecurity-dfm/dfm/storage.py
Line 181 in 03bd533
The text was updated successfully, but these errors were encountered: