daffe1f90ec57f8ed69464f9094753fc6452e983 - gddo

commit: daffe1f90ec57f8ed69464f9094753fc6452e983
[log]
author: Tuo Shan <shantuo@google.com>
Wed Jun 27 21:27:15 2018 -0700
committer: Filippo Valsorda <filippo@golang.org>
Tue Jul 03 17:44:36 2018 +0000
tree: a9c7261dca44e46b0680dc6cd7490da904cb9871
parent: 9ab275bde8fe1bb887642e9250b8d58aba11af61 [diff]

gosrc: validate repo from meta

Fixes CVE-2018-12976.

Change-Id: I6b87ab692915d46ba4f668ab848473de9b054c8a
Reviewed-on: https://go-review.googlesource.com/121358
Reviewed-by: Filippo Valsorda <filippo@golang.org>

gosrc/gosrc.go[diff]
gosrc/gosrc_test.go[diff]

2 files changed

tree: a9c7261dca44e46b0680dc6cd7490da904cb9871

database/
deploy/
doc/
gae-service-proxy/
gddo-admin/
gddo-server/
Godeps/
gosrc/
httputil/
internal/
lintapp/
log/
talksapp/
vendor/
.travis.yml
CONTRIBUTING.md
Dockerfile
LICENSE
README.markdown