mirror of
https://github.com/golang/go
synced 2024-10-04 22:21:22 -06:00
16b38b554f
use path.Clean in web server to sanitize URLs. http://triv/go/../../../etc/passwd no longer serves the password file. it redirects to http://triv/etc/passwd which then gets a 404. R=r DELTA=288 (286 added, 0 deleted, 2 changed) OCL=27142 CL=27152 |
||
---|---|---|
.. | ||
Makefile | ||
request.go | ||
server.go | ||
status.go | ||
triv.go | ||
url.go |