3 ms·
This exact thing is being discussed https://github.com/golang/go/issues/25849 https://github.com/golang/go/issues/25849 here. Maybe take a look
by NotEvil 5y ago
This exact thing is being discussed https://github.com/golang/go/issues/25849 https://github.com/golang/go/issues/25849 here. Maybe take a look
- TheDong 5y agothanks a ton for the link. This looks way better than I would have expected. Though also, "we've seen this cause exploits in the wild multiple times, let's just let this footgun sit for 3 years". They could have at least added a documentation note to the archive/tar page that there's a security issue you have to handle, which is what the unsafe version of the rust unarchive methods do. 3 years of not even updating docs is kinda unfortunate.
- NotEvil 5y agoyeah, it's even suggested. I know its kinda low pirority in grand scheme of things but still. But well even i could have made that pr so. :shrug: