miniblog.

← Back to all posts
May 25, 2026 at 15:13
2
Go has an os.Root API that allows you to enforce all paths are subdirectories of a given root. It fixes users accessing foo/../../../etc/passwd and similar. Seems like a really nice solution for a relatively common problem.
Traversal-resistant file APIs - The Go Programming Language
New file access APIs in Go 1.24.

Related Posts

May 28, 2026 at 13:27
35
My $2/month VPS has stopped and can't even boot, so I've switched provider. It seems like most server providers don't want to offer <$5 machines, and I imagine it's hard to make money at the low end. Several providers require a one-off setup fee too.
May 8, 2026 at 14:43
I'm impressed and slightly surprised that I can browse the web even when my local library's wifi blocks detectportal.firefox.com ("Download sites are banned"). It seems that Firefox only requires the website to be redirected when there's a captive portal.
Mar 8, 2026 at 22:56
33
Writing type params with <> (e.g. List<Int>) seems the most natural to me: probably because I encountered that syntax first. Between C++, Java and TypeScript I think it's the most common too. List[Int] seems to be next most common (Scala, Python) but TIL Gleam uses List(Int)!