]> Cypherpunks.ru repositories - gostls13.git/commit
archive/tar, archive/zip: disable ErrInsecurePath by default
authorDamien Neil <dneil@google.com>
Mon, 21 Nov 2022 22:27:24 +0000 (14:27 -0800)
committerGopher Robot <gobot@golang.org>
Tue, 22 Nov 2022 18:11:34 +0000 (18:11 +0000)
commit7a00f973a557fa8b5294652382a6280ddb196c1e
tree5d3c150b835956f3d1a8eb577bdf7e5f5d6c10b1
parent28911b289103d6128c3364a3e3de4ed8eabe630f
archive/tar, archive/zip: disable ErrInsecurePath by default

This change is being made late in the release cycle.
Disable it by default. Insecure path checks may be enabled by setting
GODEBUG=tarinsecurepath=0 or GODEBUG=zipinsecurepath=0.
We can enable this by default in Go 1.21 after publicizing the change
more broadly and giving users a chance to adapt to the change.

For #55356.

Change-Id: I549298b3c85d6c8c7fd607c41de1073083f79b1d
Reviewed-on: https://go-review.googlesource.com/c/go/+/452616
TryBot-Result: Gopher Robot <gobot@golang.org>
Auto-Submit: Damien Neil <dneil@google.com>
Reviewed-by: Russ Cox <rsc@golang.org>
Run-TryBot: Damien Neil <dneil@google.com>
doc/go1.20.html
src/archive/tar/reader.go
src/archive/zip/reader.go