1
0
mirror of https://github.com/golang/go synced 2024-09-29 08:24:36 -06:00
go/doc
Damien Neil a2d8157a7e archive/tar, archive/zip: return ErrInsecurePath for unsafe paths
Return a distinguishable error when reading an archive file
with a path that is:

	- absolute
	- escapes the current directory (../a)
	- on Windows, a reserved name such as NUL

Users may ignore this error and proceed if they do not need name
sanitization or intend to perform it themselves.

Fixes #25849
Fixes #55356

Change-Id: Ieefa163f00384bc285ab329ea21a6561d39d8096
Reviewed-on: https://go-review.googlesource.com/c/go/+/449937
Reviewed-by: Joseph Tsai <joetsai@digital-static.net>
TryBot-Result: Gopher Robot <gobot@golang.org>
Run-TryBot: Damien Neil <dneil@google.com>
Auto-Submit: Damien Neil <dneil@google.com>
Reviewed-by: Ian Lance Taylor <iant@golang.org>
Reviewed-by: Roland Shoemaker <roland@golang.org>
2022-11-16 23:36:48 +00:00
..
asm.html doc/asm: fix HTML markup 2021-09-10 17:15:37 +00:00
go1.17_spec.html spec: fix a broken link 2021-11-11 19:44:13 +00:00
go1.20.html archive/tar, archive/zip: return ErrInsecurePath for unsafe paths 2022-11-16 23:36:48 +00:00
go_mem.html doc: fix typos in Go memory model 2022-06-10 22:10:29 +00:00
go_spec.html spec: document the new unsafe functions SliceData, String, and StringData 2022-11-14 05:30:16 +00:00