[Bug 1077894] VUL-0: CVE-2018-6360: mpv through 0.28.0 allows remote attackers to execute arbitrary code via acrafted web site, because it reads HTML documents containing VIDEO elements, andaccepts arbitrary URLs in a src attribute without a protocol w