fsutil icon indicating copy to clipboard operation
fsutil copied to clipboard

clarify why copy.Copy is unsafe

Open errordeveloper opened this issue 1 year ago • 1 comments

The documentation currently states this:

https://github.com/tonistiigi/fsutil/blob/9e7a6df4857652bc85225f55e2edb8aece3ecd43/copy/copy.go#L65-L66

It's not clear what is the safety concern exactly.

errordeveloper avatar Apr 25 '23 12:04 errordeveloper

I think this comment is old, before the proper rootPath protection were added. Before that, the concern was that copying paths that contain symlinks could potentially access files outside of the src/dest arguments.

tonistiigi avatar Jun 27 '23 20:06 tonistiigi