|
|
|
|
|
|
by ncruces
14 days ago
|
|
|
Stuff that cares about security fixes this, though: https://go.dev/blog/path-security The functions Command and LookPath look for a program in the directories listed in the current path, following the conventions of the host operating system. Operating systems have for decades included the current directory in this search, sometimes implicitly and sometimes configured explicitly that way by default. Modern practice is that including the current directory is usually unexpected and often leads to security problems. https://pkg.go.dev/os/exec#hdr-Executables_in_the_current_di... |
|
|