News for hackers. Stuff that matters.

A comment on Dot Dot Considered Harmful.

Re:Dot Dot Considered Harmful by starclaps on Wednesday November 28, 2018 @03:31PM (#18555359)
That’s why tools like gosec complain when user input is used to access files - specifically because ‚..‘ allows one to „escape“.

Gosec: https://github.com/securego/gosec

[ Parent | on HN ]

There are no comments on this comment yet.