News for hackers. Stuff that matters.

A comment on Go Language – Web Application Secure Coding Practices. Parent comment

Re:Go Language – Web Application Secure Coding Practices by MajesticHobo on Friday June 23, 2017 @03:20PM (#14621979)
This guide still has some issues. It's missing common classes of web app vulns I've seen in Go code (e.g. CSRF, SSRF) and has some weird advice here and there (scan uploaded files with AV? Really?)
[ Parent | on HN ]
Re:Go Language – Web Application Secure Coding Practices by wbl on Friday June 23, 2017 @05:02PM (#14622759)
Fail to scan with AV and you might be an unwitting malware distributor.
[ Parent | on HN ]
Re:Go Language – Web Application Secure Coding Practices by MajesticHobo on Friday June 23, 2017 @05:26PM (#14622930)
If you allow binary uploads, you're going to be a malware distributor whether you scan or not. AV just introduces complexity and attack surface and doesn't really belong in a guide about Golang secure coding practices.
[ Parent | on HN ]