drm-tools
drm-tools copied to clipboard
feedsbrain
Tools for Widevine and Playready
Bumps [word-wrap](https://github.com/jonschlinkert/word-wrap) from 1.2.3 to 1.2.4. Release notes Sourced from word-wrap's releases. 1.2.4 What's Changed Remove default indent by @mohd-akram in jonschlinkert/word-wrap#24 🔒fix: CVE 2023 26115 (2) by @OlafConijn in...
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "dependabot[bot] avatar"){kind=avatar}
Bumps [acorn](https://github.com/acornjs/acorn) from 6.1.1 to 6.4.2. Commits f6b83ed Mark version 6.4.2 f51895b Fix potentially-exponential regular expression in use-strict-scanning 9a2e9b6 Mark version 6.4.1 90a9548 More rigorously check surrogate pairs in regexp...
Bumps [path-parse](https://github.com/jbgutierrez/path-parse) from 1.0.6 to 1.0.7. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...
Bumps [hosted-git-info](https://github.com/npm/hosted-git-info) from 2.7.1 to 2.8.9. Changelog Sourced from hosted-git-info's changelog. 2.8.9 (2021-04-07) Bug Fixes backport regex fix from #76 (29adfe5), closes #84 2.8.8 (2020-02-29) Bug Fixes #61 & #65...
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.15 to 4.17.21. Commits f299b52 Bump to v4.17.21 c4847eb Improve performance of toNumber, trim and trimEnd on large input strings 3469357 Prevent command injection through _.template's variable...
 ### Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project. #### Snyk changed the following file(s): - `package.json` - `package-lock.json` #### Vulnerabilities...
takes the server response as is: https://github.com/feedsbrain/drm-tools/blob/d699b6f3c7039d76cfaa62b3f7aca6391752f572/lib/widevine.js#L42-L45 then just takes the keys as is: https://github.com/feedsbrain/drm-tools/blob/d699b6f3c7039d76cfaa62b3f7aca6391752f572/cli/widevine.js#L45-L47 widevine server response returns encrypted keys, so this code will never work
