My minimal, memory-safe Go rsync steers clear of vulnerabilities

4 points by Brajeshwar 4 hours ago | 3 comments

Is there a solid reference resource on handling symlinks? It seems a never ending source of security bugs.

euroderf 1 hour ago | |

The new os.Root is supposed to handle symlinks correctly in a sandbox, but (of course?) the first release had a bug related to symlinks.

d0vs 1 hour ago | |

Agreed. Not a direct answer but this should be interesting: https://github.com/cyphar/filepath-securejoin