すべてのオプション
bullseye  ] [  bookworm  ] [  trixie  ] [  sid  ]
[ ソース: golang-github-cli-safeexec  ]

パッケージ: golang-github-cli-safeexec-dev (1.0.1-1)

golang-github-cli-safeexec-dev に関するリンク

Screenshot

Debian の資源:

golang-github-cli-safeexec ソースパッケージをダウンロード:

メンテナ:

外部の資源:

類似のパッケージ:

safer version of exec.LookPath on Windows

safeexec is a Go module that provides a safer alternative to exec.LookPath() on Windows.

The following, relatively common approach to running external commands has a subtle vulnerability on Windows:

  import "os/exec"

  func gitStatus() error {
      // On Windows, this will result in .\git.exe or .\git.bat being executed
      // if either were found in the current working directory.
      cmd := exec.Command("git", "status") return cmd.Run()
  }

Searching the current directory (surprising behavior) before searching folders listed in the PATH environment variable (expected behavior) seems to be intended in Go and unlikely to be changed: https://github.com/golang/go/issues/38736

Since Go does not provide a version of exec.LookPath() that only searches PATH and does not search the current working directory, this module provides a LookPath function that works consistently across platforms.

Example use:

  import (
      "os/exec" "github.com/cli/safeexec"
  )

  func gitStatus() error {
      gitBin, err := safeexec.LookPath("git")
      if err != nil {
          return err
      }
      cmd := exec.Command(gitBin, "status")
      return cmd.Run()
  }

golang-github-cli-safeexec-dev のダウンロード

すべての利用可能アーキテクチャ向けのダウンロード
アーキテクチャ パッケージサイズ インストールサイズ ファイル
all 5.6 kB33.0 kB [ファイル一覧]