Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove A.Cmd #307

Closed
pellared opened this issue Nov 24, 2022 · 0 comments · Fixed by #308
Closed

Remove A.Cmd #307

pellared opened this issue Nov 24, 2022 · 0 comments · Fixed by #308
Labels
enhancement New feature or request
Milestone

Comments

@pellared
Copy link
Member

pellared commented Nov 24, 2022

The reasons to remove A.Cmd are the following:

  1. os/exec is not hardened by default. More: Go blog: Command PATH security in Go
  2. github.com/goyek/x/cmd covers most use cases. It can use golang.org/x/sys/execabs to be more secure.

Programs build using Go 1.19 has the fix in place. See https://pkg.go.dev/os/exec#hdr-Executables_in_the_current_directory and https://go.dev/blog/go1.19.

  1. Reduce the API surface. Users can use their own helpers or github.com/goyek/x/cmd.
@pellared pellared added the enhancement New feature or request label Nov 24, 2022
@pellared pellared added this to the v2 milestone Nov 24, 2022
@pellared pellared mentioned this issue Nov 24, 2022
5 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant