tree 5c9a5a9a38627e20b752116f2621627c13650b55
parent 0db53dede6f55f12a7e66d71f8c725cd200c3f54
author Ian Lance Taylor <iant@golang.org> 1518739033 -0800
committer Ian Lance Taylor <iant@golang.org> 1518809321 +0000

cmd/go: restrict meta imports to valid schemes

Before this change, when using -insecure, we permitted any meta import
repo root as long as it contained "://". When not using -insecure, we
restrict meta import repo roots to be valid URLs. People may depend on
that somehow, so permit meta import repo roots to be invalid URLs, but
require them to have valid schemes per RFC 3986.

Fixes #23867

Change-Id: Iac666dfc75ac321bf8639dda5b0dba7c8840922d
Reviewed-on: https://go-review.googlesource.com/94603
Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>