Proposal: removeDirectoryRecursive should not follow symlinks
Antonio Nikishaev
me at lelf.lu
Wed Jan 7 17:19:32 UTC 2015
"Edward Z. Yang" <ezyang at mit.edu> writes:
> I propose to backwards incompatibly change the behavior of
> removeDirectoryRecursive to not follow symlinks. We could optionally
> add a replacement function under a new name which does follow
> symlinks.
+1 for changing it immediately,
-1 for any deprecation period,
-1 for adding the old one under another name
Motivation: even if documented, the behaviour is severe bug with
security implications. I don't think anyone in the right mind would
expect such a function to follow symlinks.
More information about the Libraries
mailing list