Go: Traversal-resistant file APIs

NewsBot

A new Go blog post/announcement has been posted!

<div class="Article" data-slug="/blog/osroot">

<h1 class="small"><a href="/blog/">The Go Blog</a></h1>


<h1>Traversal-resistant file APIs</h1>
  
  <p class="author">
  Damien Neil<br>
  12 March 2025
  </p>
  
  <p>A <em>path traversal vulnerability</em> arises when an attacker can trick a program
into opening a file other than the one it intended.
This post explains this class of vulnerability,
some existing defenses against it, and describes how the new
os.Root API added in Go 1.24 provides
a simple and robust defense against unintentional path traversal.

Path traversal attacks

“Path traversal” covers a number of related attacks following a common pattern: A program attempts to open a file in some known location, but an attacker causes it to open a file in a different location.</p...

Get the full details here: Traversal-resistant file APIs - The Go Programming Language

View thread on forum

/go #official-news #apis

0 0 0

2025-03-13 05:17:33 UTC

Popular Backend topics

Backend Developer Forum>Learning Resources

Test-Driven Development for Embedded C

TDD is a modern programming practice that all C developers need to know. It’s a different way to program—unit tests are written in a tigh...

/c #pragprog #published-book /book-test-driven-development-for-embedded-c

3 1426 1

2020-08-12 12:21:47 UTC

New

Backend Developer Forum>Learning Resources

Create a cryptocurrency trading bot in Elixir (self-published) (book + videos)

Create a cryptocurrency trading bot in Elixir (YouTube videos, ebook pay what you want) <span class="hashtag-icon-placeholder"></span>eli...

/elixir #cryptocurrencies #algorithmic-trading

32 2133 13

2022-06-09 16:11:49 UTC

New

Backend Developer Forum>News

Deep Learning with Python, Second Edition

Deep Learning with Python, Second Edition is a comprehensive introduction to the field of deep learning using Python and the powerful Ker...

#manning /python #machine-learning #tensorflow #deep-learning #computer-vision

3 1538 1

2021-07-21 15:08:04 UTC

New

Backend Developer Forum>News

Announcing Axum - an easy to use, powerful, web framework for Tokio (Tokio is an asynchronous runtime for the Rust programming language)

Today we are happy to announce axum: An easy to use, yet powerful, web framework designed to take full advantage of the Tokio ecosystem. ...

tokio.rs

/rust #tokio #axum

13 1544 6

2021-08-13 20:54:38 UTC

New

Backend Developer Forum>Questions/Help

Novice developer hoping to learn Elixir - any tips?

Hello Folks, I am a novice developer from India. Intending to learn Elixir and web apps (phoenix framework). What are things that I MUS...

/elixir #beginner #suggestion

53 1268 15

2021-10-10 03:28:37 UTC

New

Backend Developer Forum>Learning Resources

Modern Asynchronous JavaScript

Delve into async features of JavaScript from ES2020 through ESNext. Start building custom asynchronous iterators and generators, and more...

#pragprog #published-book /js /book-modern-asynchronous-javascript

21 1652 5

2021-09-16 09:30:52 UTC

New

Backend Developer Forum>Learning Resources

Kubernetes in Action, Second Edition

Kubernetes in Action, Second Edition teaches you to use Kubernetes to deploy container-based distributed applications. You'll start with ...

#manning #kubernetes #meap

4 1613 1

2021-10-21 11:48:04 UTC

New

Backend Developer Forum>Questions/Help

Ecto issue, not sure how to do this?

Hello, I am. very new to Elixir lang I have only been doing it for about 2 weeks. I recently started following this tutorial todo list, ...

/elixir /phoenix #beginner #ecto

12 1841 4

2022-03-10 23:54:31 UTC

New

Backend Developer Forum>Questions/Help

How to have custom enconding for struct using Jason?

Background I am trying to encode a structure into json format using the Jason library. However, this is not working as expected. Code L...

/elixir #json

6 2284 2

2022-03-15 08:19:56 UTC

New

Backend Developer Forum>Learning Resources

Machine Learning in Elixir

Leverage Elixir and the Nx ecosystem to build intelligent applications that solve real-world problems in computer vision, natural languag...

#nx /elixir #pragprog #machine-learning #published-book /book-machine-learning-in-elixir

18 1170 7

2024-11-08 22:13:04 UTC

New

Other popular topics

Hardware

Which keyboard do you have?

If it’s a mechanical keyboard, which switches do you have? Would you recommend it? Why? What will your next keyboard be? Pics always w...

#hardware /keyboards #mechanical-keyboards #sticky

144 8208 50

2021-01-07 23:58:36 UTC

New

Game Developer Forum>Learning Resources

Hands-on Rust: Effective Learning through 2D Game Development and Play

Rust is an exciting new programming language combining the power of C with memory safety, fearless concurrency, and productivity boosters...

#pragprog /rust #published-book /book-hands-on-rust

118 6878 31

2024-11-09 13:24:20 UTC

New

Hardware

GMK Serika Keycaps - Serika 2 available to order now!

I have seen the keycaps I want - they are due for a group-buy this week but won’t be delivered until October next year!!! :rofl: The Ser...

/keyboards #keycaps #mechanical-keyboards

9 4158 7

2020-12-05 21:32:30 UTC

New

Backend Developer Forum>Chat/Discussions

How to install Ruby 3 with ASDF

In case anyone else is wondering why Ruby 3 doesn’t show when you do asdf list-all ruby :man_facepalming: do this first: asdf plugin-upd...

/ruby #asdf

11 5073 5

2021-02-02 08:02:13 UTC

New

Backend Developer Forum>Questions/Help

Please tell me how to write a query for this in nodejs

API 4 Path: /user/following/ Method: GET Description: Returns the list of all names of people whom the user follows Response [ { ...

/nodejs

7 2839 4

2021-06-23 23:49:49 UTC

New

In The Spotlight

Spotlight: James Stanier (Author) Interview and AMA!

Author Spotlight James Stanier @jstanier James Stanier, author of Effective Remote Work , discusses how to rethink the office as we e...

#pragprog #remote /book-effective-remote-work

29 3855 12

2022-02-08 15:17:22 UTC

New

Backend Developer Forum>Learning Resources

Effective Haskell

Build efficient applications that exploit the unique benefits of a pure functional language, learning from an engineer who uses Haskell t...

#pragprog /haskell #published-book /book-effective-haskell

15 4338 2

2022-02-16 10:09:51 UTC

New

In The Spotlight

Spotlight: Karl Stolley (Author) Interview and AMA!

Author Spotlight: Karl Stolley @karlstolley Logic! Rhetoric! Prag! Wow, what a combination. In this spotlight, we sit down with Karl ...

#author-spotlight /book-programming-webrtc

31 3516 17

2023-03-28 18:47:13 UTC

New

Backend Developer Forum>Questions/Help

Psql: error: connection to server on socket "/tmp/.s.PGSQL.5432" failed: No such file or directory

If you’re getting errors like this: psql: error: connection to server on socket “/tmp/.s.PGSQL.5432” failed: No such file or directory ...

/rails #macos /postgresql

1 988 1

2024-10-17 02:03:48 UTC

New

Artificial Intelligence Forum

DeepSeek (671B) running on a cluster of 8 Mac Mini Pros with 64GB RAM each

This is cool! DEEPSEEK-V3 ON M4 MAC: BLAZING FAST INFERENCE ON APPLE SILICON We just witnessed something incredible: the largest open-s...

#ai #macs /deepseek

0 2231 1

2025-01-29 18:43:37 UTC

New

Go: Traversal-resistant file APIs

NewsBot

Popular Backend topics

Test-Driven Development for Embedded C

Create a cryptocurrency trading bot in Elixir (self-published) (book + videos)

Deep Learning with Python, Second Edition

Announcing Axum - an easy to use, powerful, web framework for Tokio (Tokio is an asynchronous runtime for the Rust programming language)

Novice developer hoping to learn Elixir - any tips?

Modern Asynchronous JavaScript

Kubernetes in Action, Second Edition

Ecto issue, not sure how to do this?

How to have custom enconding for struct using Jason?

Machine Learning in Elixir

Other popular topics

Which keyboard do you have?

Hands-on Rust: Effective Learning through 2D Game Development and Play

GMK Serika Keycaps - Serika 2 available to order now!

How to install Ruby 3 with ASDF

Please tell me how to write a query for this in nodejs

Spotlight: James Stanier (Author) Interview and AMA!

Effective Haskell

Spotlight: Karl Stolley (Author) Interview and AMA!

Psql: error: connection to server on socket "/tmp/.s.PGSQL.5432" failed: No such file or directory

DeepSeek (671B) running on a cluster of 8 Mac Mini Pros with 64GB RAM each

Latest in Backend

Latest (all)

We ❤️ helpful members!

Categories:

Popular Portals

We're in Beta

Go: Traversal-resistant file APIs

NewsBot

Popular Backend topics

Test-Driven Development for Embedded C

Create a cryptocurrency trading bot in Elixir (self-published) (book + videos)

Deep Learning with Python, Second Edition

Announcing Axum - an easy to use, powerful, web framework for Tokio (Tokio is an asynchronous runtime for the Rust programming language)

Novice developer hoping to learn Elixir - any tips?

Modern Asynchronous JavaScript

Kubernetes in Action, Second Edition

Ecto issue, not sure how to do this?

How to have custom enconding for struct using Jason?

Machine Learning in Elixir

Other popular topics

Which keyboard do you have?

Hands-on Rust: Effective Learning through 2D Game Development and Play

GMK Serika Keycaps - Serika 2 available to order now!

How to install Ruby 3 with ASDF

Please tell me how to write a query for this in nodejs

Spotlight: James Stanier (Author) Interview and AMA!

Effective Haskell

Spotlight: Karl Stolley (Author) Interview and AMA!

Psql: error: connection to server on socket "/tmp/.s.PGSQL.5432" failed: No such file or directory

DeepSeek (671B) running on a cluster of 8 Mac Mini Pros with 64GB RAM each

Latest in Backend

Latest (all)

We ❤️ helpful members!

Devtalk Sponsors

Categories:

Popular Portals

Devtalk Sponsors

We're in Beta