doc/go1.21: document that os.TempDir now uses GetTempPath2W

Updates #56899

Change-Id: Ibde69cd55c81ac0bb757b28b28d69463778dd117
Reviewed-on: https://go-review.googlesource.com/c/go/+/500255
Reviewed-by: Michael Knyszek <mknyszek@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Run-TryBot: Quim Muntal <quimmuntal@gmail.com>
Reviewed-by: Ian Lance Taylor <iant@google.com>

diff --git a/doc/go1.21.html b/doc/go1.21.html
index 8e9b170882934bcd887d2ba8da7af0e96afc9efd..1c7fb9ec5ca3572ca0a77afc4579d46b2c80d6c0 100644 (file)
--- a/doc/go1.21.html
+++ b/doc/go1.21.html
@@ -745,6 +745,15 @@ Do not send CLs removing the interior tags from such phrases.
       an error indicating that the file does not exist.
     </p>
 
+    <p><!-- https://go.dev/issue/56899, CL 463219 -->
+      On Windows calling
+      <a href="/pkg/os/#TempDir"><code>TempDir</code></a> now uses
+      GetTempPath2W when available, instead of GetTempPathW. The
+      new behavior is a security hardening measure that prevents
+      temporary files created by processes running as SYSTEM to
+      be accessed by non-SYSTEM processes.
+    </p>
+
     <p><!-- CL 493036 -->
       On Windows the os package now supports working with files whose
       names, stored as UTF-16, can't be represented as valid UTF-8.