NewsBot

Go: Traversal-resistant file APIs

A new Go blog post/announcement has been posted!

<div class="Article" data-slug="/blog/osroot">

<h1 class="small"><a href="/blog/">The Go Blog</a></h1>


<h1>Traversal-resistant file APIs</h1>
  
  <p class="author">
  Damien Neil<br>
  12 March 2025
  </p>
  
  <p>A <em>path traversal vulnerability</em> arises when an attacker can trick a program
into opening a file other than the one it intended.
This post explains this class of vulnerability,
some existing defenses against it, and describes how the new
os.Root API added in Go 1.24 provides
a simple and robust defense against unintentional path traversal.

Path traversal attacks

“Path traversal” covers a number of related attacks following a common pattern: A program attempts to open a file in some known location, but an attacker causes it to open a file in a different location.</p...

Get the full details here: Traversal-resistant file APIs - The Go Programming Language

View thread on forum

/go #official-news #apis

0 859 0

2025-03-13 05:17:33 UTC

Where Next?

View thread on forum

official-news

apis

Home Backend>Official News

/go #official-news #apis

0 859 0

Last post

Popular Backend topics

Backend>Official News

Phoenix 1.5.0 released

Lots of cool stuff in this release! This release brings a number of exciting features, including integration with the new Phoenix LiveD...

/elixir /phoenix #framework-release-news

8 1520 0

2020-04-16 20:59:01 UTC

New

Backend>Official News

Phel is a functional programming language inspired by Clojure that compiles to PHP

phel-lang/phel-lang. Phel is a functional programming language that compiles to PHP. It is a dialect of Lisp inspired by Clojure and Jan...

github.com

/clojure /php #programming #phel

0 1696 0

2021-01-30 15:30:30 UTC

New

Backend>Official News

Lunatic - An Erlang inspired runtime for all programming languages (WebAssembly)

More cool tech inspired by <span class="hashtag-icon-placeholder"></span>erlang :nerd_face: By combining the fault-tolerance and massiv...

lunatic.solutions

/wasm /lunatic

19 2491 9

2021-03-16 15:46:33 UTC

New

Backend>Official News

Node.js v22.15.0 released!

Node.js v22.15.0 has been released. Link: Release 2025-04-23, Version 22.15.0 'Jod' (LTS), @UlisesGascon prepared by @RafaelGSS · nodej...

github.com

/nodejs #official-news

0 1911 0

2025-04-23 14:29:34 UTC

New

Backend>Official News

Node.js v24.0.0 released!

Node.js v24.0.0 has been released. Link: Release 2025-05-06, Version 24.0.0 (Current), @RafaelGSS and @juanarbol · nodejs/node · GitHub

github.com

/nodejs /wasm #official-news

0 2077 0

2025-05-07 04:30:23 UTC

New

Backend>Official News

PostgreSQL 17.6, 16.10, 15.14, 14.19, 13.22, and 18 Beta 3 Released!

A new PostgreSQL blog post/announcement has been posted! Get the full details here: PostgreSQL: PostgreSQL 17.6, 16.10, 15.14, 14.19, 1...

postgresql.org

#postgres /postgresql #official-news

0 2666 0

2025-08-14 15:29:43 UTC

New

Backend>Official News

Python 3.14.0rc2 and 3.13.7 are go!

A new Python blog post/announcement has been posted! Get the full details here: Python Insider: Python 3.14.0rc2 and 3.13.7 are go!

pythoninsider.blogspot.com

/python #official-news

1 2400 1

2025-08-21 12:01:24 UTC

New

Backend>Official News

Announcing Rust 1.90.0

A new Rust blog post/announcement has been posted! Get the full details here: Announcing Rust 1.90.0 | Rust Blog

blog.rust-lang.org

/rust #official-news

0 2263 0

2025-09-18 15:30:03 UTC

New

Backend>Official News

Node.js v25.0.0 released!

Node.js v25.0.0 has been released. Link: Release 2025-10-15, Version 25.0.0 (Current), @RafaelGSS · nodejs/node · GitHub

github.com

/nodejs /wasm #official-news

0 2627 0

2025-10-15 18:21:44 UTC

New

Backend>Official News

Node.js v24.12.0 released!

Node.js v24.12.0 has been released. Link: Release 2025-12-10, Version 24.12.0 'Krypton' (LTS), @targos · nodejs/node · GitHub

github.com

/nodejs #official-news

0 592 1

2025-12-17 14:41:23 UTC

New

Other popular topics

General Dev>Learning Resources

A Common-Sense Guide to Data Structures and Algorithms, Second Edition

Algorithms and data structures are much more than abstract concepts. Mastering them enables you to write code that runs faster and more e...

pragprog.com

#pragprog /python /ruby #published-book /book-a-common-sense-guide-to-data-structures-and-algorithms-second-edition #math #algorithms /js

19 6022 5

2020-08-14 00:58:37 UTC

New

Science/Tech>Tech Chat

Games! Which do you play?

Which, if any, games do you play? On what platform? I just bought (and completed) Minecraft Dungeons for my Nintendo Switch. Other than ...

#games

246 6097 101

2024-08-22 11:09:29 UTC

New

General Dev>Hardware

What monitor(s) do you have for programming?

Please tell us what is your preferred monitor setup for programming(not gaming) and why you have chosen it. Does your monitor have eye p...

#monitors #coding #programming #development

227 11362 88

2022-02-01 12:02:08 UTC

New

General Dev>Code Editors

Onivim 2 Code Editor

Thanks to @foxtrottwist’s and @Tomas’s posts in this thread: Poll: Which code editor do you use? I bought Onivim! :nerd_face: https://on...

#code-editors /onivim /revery

88 6144 32

2023-05-15 07:32:26 UTC

New

Backend>Questions

Erlang's not installing on macOS Big Sur "You are natively building Erlang/OTP for a later version of MacOSX than current version"

Just done a fresh install of macOS Big Sur and on installing Erlang I am getting: asdf install erlang 23.1.2 Configure failed. checking ...

#macos /erlang #big-sur #asdf

10 6212 8

2021-01-16 12:33:23 UTC

New

Frontend>Learning Resources

Modern CSS with Tailwind

Tailwind CSS is an exciting new CSS framework that allows you to design your site by composing simple utility classes to create complex e...

pragprog.com

#pragprog /tailwind #published-book /book-modern-css-with-tailwind

12 5813 4

2021-05-13 14:50:23 UTC

New

General Dev>Dev Chat

Languages Without Garbage Collection

Continuing the discussion from Thinking about learning Crystal, let’s discuss - I was wondering which languages don’t GC - maybe we can c...

#garbage-collection

21 5575 7

2021-05-06 05:54:58 UTC

New

General Dev>Dev Chat

Roc Language - a new purely functional programming language built for speed and ergonomics

Hi folks, I don’t know if I saw this here but, here’s a new programming language, called Roc Reminds me a bit of Elm and thus Haskell. ...

#programminguages #functional-programming

49 5164 14

2021-11-10 20:03:09 UTC

New

Community>In The Spotlight

Spotlight: Bruce Tate (Author) Interview and AMA!

Author Spotlight: Bruce Tate @redrapids Programming languages always emerge out of need, and if that’s not always true, they’re defin...

/elixir /ruby /phoenix /book-seven-more-languages-in-seven-weeks /book-seven-languages-in-seven-weeks #liveview /book-programming-phoenix-liveview

54 5678 23

2023-10-17 17:14:03 UTC

New

Android>Questions

Unresolved Reference to android in build.gradle.kts – Beginner Issue

Hello, I’m a beginner in Android development and I’m facing an issue with my project setup. In my build.gradle.kts file, I have the foll...

#binding

0 7460 2

2024-12-09 21:07:33 UTC

New

Go: Traversal-resistant file APIs

NewsBot

Go: Traversal-resistant file APIs

Where Next?

Popular Backend topics

Phoenix 1.5.0 released

Phel is a functional programming language inspired by Clojure that compiles to PHP

Lunatic - An Erlang inspired runtime for all programming languages (WebAssembly)

Node.js v22.15.0 released!

Node.js v24.0.0 released!

PostgreSQL 17.6, 16.10, 15.14, 14.19, 13.22, and 18 Beta 3 Released!

Python 3.14.0rc2 and 3.13.7 are go!

Announcing Rust 1.90.0

Node.js v25.0.0 released!

Node.js v24.12.0 released!

Other popular topics

A Common-Sense Guide to Data Structures and Algorithms, Second Edition

Games! Which do you play?

What monitor(s) do you have for programming?

Onivim 2 Code Editor

Erlang's not installing on macOS Big Sur "You are natively building Erlang/OTP for a later version of MacOSX than current version"

Modern CSS with Tailwind

Languages Without Garbage Collection

Roc Language - a new purely functional programming language built for speed and ergonomics

Spotlight: Bruce Tate (Author) Interview and AMA!

Unresolved Reference to android in build.gradle.kts – Beginner Issue

Latest in Go

Backend>Official News

Latest on Devtalk

We ❤️ helpful members!

Categories:

Sub Categories:

Popular Portals

We're in Beta

Go: Traversal-resistant file APIs

NewsBot

Go: Traversal-resistant file APIs

Where Next?

Popular Backend topics

Phoenix 1.5.0 released

Phel is a functional programming language inspired by Clojure that compiles to PHP

Lunatic - An Erlang inspired runtime for all programming languages (WebAssembly)

Node.js v22.15.0 released!

Node.js v24.0.0 released!

PostgreSQL 17.6, 16.10, 15.14, 14.19, 13.22, and 18 Beta 3 Released!

Python 3.14.0rc2 and 3.13.7 are go!

Announcing Rust 1.90.0

Node.js v25.0.0 released!

Node.js v24.12.0 released!

Other popular topics

A Common-Sense Guide to Data Structures and Algorithms, Second Edition

Games! Which do you play?

What monitor(s) do you have for programming?

Onivim 2 Code Editor

Erlang's not installing on macOS Big Sur "You are natively building Erlang/OTP for a later version of MacOSX than current version"

Modern CSS with Tailwind

Languages Without Garbage Collection

Roc Language - a new purely functional programming language built for speed and ergonomics

Spotlight: Bruce Tate (Author) Interview and AMA!

Unresolved Reference to android in build.gradle.kts – Beginner Issue

Sponsor Spotlight

Latest in Go

Backend>Official News

Latest on Devtalk

We ❤️ helpful members!

Devtalk Sponsors

Categories:

Sub Categories:

Popular Portals

Devtalk Sponsors

We're in Beta