[HN Gopher] Command Path Security in Go
___________________________________________________________________
Command Path Security in Go
Author : pjmlp
Score : 63 points
Date : 2021-01-23 10:20 UTC (2 days ago)
(HTM) web link (blog.golang.org)
(TXT) w3m dump (blog.golang.org)
| retzkek wrote:
| > If that describes you, today is a good day to remove dot from
| your path
|
| Good security tip/reminder! It's a slight inconvenience to have
| to type "./" in front of any local executable or script you want
| to run, and it's tempting to add "." to $PATH, but here's a good
| reason it's not there by default.
___________________________________________________________________
(page generated 2021-01-25 23:00 UTC)