3 ms·
My minimal, memory-safe Go rsync steers clear of vulnerabilities
- 3eb7988a1663 5mo agoIs there a solid reference resource on handling symlinks? It seems a never ending source of security bugs.
- d0vs 5mo agoAgreed. Not a direct answer but this should be interesting: https://github.com/cyphar/filepath-securejoin https://github.com/cyphar/filepath-securejoin
- euroderf 5mo agoThe new os.Root is supposed to handle symlinks correctly in a sandbox, but (of course?) the first release had a bug related to symlinks.