starclaps·8 yıl önce·discussThat’s why tools like gosec complain when user input is used to access files - specifically because ‚..‘ allows one to „escape“.Gosec: https://github.com/securego/gosec
Gosec: https://github.com/securego/gosec