Question: Shouldn't check for potential file inclusion via variable for os.Create?

[vaiojarsad]

I got complaints about the potential unsafe use of os.Open and ioutil.ReadFile and I was wondering why I didn't get any about os.Create.

The program that I was working on was a really trivial tool, only for internal use (so, no real risk) but in all cases (os.Open, ioutil.ReadFile and os.Create) the provided variable to these functions could have been manipulated by a malicious user.

[ccojocar]

This function call seems to be missing form the list. I added it. Thanks for pointing this out.

[vaiojarsad]

Anytime, my pleasure!