]> Cypherpunks repositories - gostls13.git/commit
[release-branch.go1.11-security] cmd/go: reject 'get' of paths containing leading...
authorBryan C. Mills <bcmills@google.com>
Fri, 30 Nov 2018 19:04:35 +0000 (14:04 -0500)
committerBryan C. Mills <bcmills@google.com>
Fri, 7 Dec 2018 14:48:35 +0000 (14:48 +0000)
commit8954addb3294a5e664a9833354bafa58f163fe8f
tree61458d603da0057d590dfecacf514d338e7fd9cf
parentdf523969435b8945d939c7e2a849b50910ef4c25
[release-branch.go1.11-security] cmd/go: reject 'get' of paths containing leading dots or unsupported characters

On some platforms, directories beginning with dot are treated as
hidden files, and filenames containing unusual characters can be
confusing for users to manipulate (and delete).

Change-Id: Ia1f5a65b9cff4eeb51cc4dba3ff7c7afabc343f2
Reviewed-on: https://team-review.git.corp.google.com/c/368442
Reviewed-by: Dmitri Shuralyov <dmitshur@google.com>
src/cmd/go/internal/get/get.go
src/cmd/go/internal/get/path.go [new file with mode: 0644]
src/cmd/go/testdata/script/get_brace.txt [new file with mode: 0644]
src/cmd/go/testdata/script/get_dotfiles.txt [new file with mode: 0644]