2 ms·
thanks a ton for the link. This looks way better than I would have expected. Though also, "we've seen this cause exploits in the wild multiple times, let's jus
by TheDong 5y ago
thanks a ton for the link. This looks way better than I would have expected.
Though also, "we've seen this cause exploits in the wild multiple times, let's just let this footgun sit for 3 years".
They could have at least added a documentation note to the archive/tar page that there's a security issue you have to handle, which is what the unsafe version of the rust unarchive methods do. 3 years of not even updating docs is kinda unfortunate.
- NotEvil 5y agoyeah, it's even suggested. I know its kinda low pirority in grand scheme of things but still. But well even i could have made that pr so. :shrug: