5 ms·
Stuff that cares about security fixes this, though: https://go.dev/blog/path-security https://go.dev/blog/path-security The functions Command and LookPath loo
by ncruces 2mo ago
Stuff that cares about security fixes this, though:
https://go.dev/blog/path-security https://go.dev/blog/path-security
The functions Command and LookPath look for a program in the directories listed in the current path, following the conventions of the host operating system. Operating systems have for decades included the current directory in this search, sometimes implicitly and sometimes configured explicitly that way by default. Modern practice is that including the current directory is usually unexpected and often leads to security problems.
https://pkg.go.dev/os/exec#hdr-Executables_in_the_current_directory https://pkg.go.dev/os/exec#hdr-Executables_in_the_current_di...
- deleted 2mo ago[deleted]