commit 25ca8f49c3fc4a68daff7a23ab613e3453be5cda [browse]
Author: Dmitri Shuralyov
Date: 2018-12-13 12:07:16 -05:00

[release-branch.go1.10-security] go1.10.6

Change-Id: I1a05884b2df711da15d2ca3f09fcb6fc4a3264c7
Reviewed-on: https://team-review.git.corp.google.com/c/377324
Reviewed-by: Andrew Bonventre <andybons@google.com>

commit f1a7c2aae8df88403b296e87fcf59c90271f9308 [browse]
Author: Dmitri Shuralyov
Date: 2018-12-12 13:35:19 -05:00

[release-branch.go1.10-security] doc: document Go 1.10.6

Change-Id: I3fe44887a84586d73be01df78a9cbb002c1fc9c5
Reviewed-on: https://team-review.git.corp.google.com/c/376467
Reviewed-by: Filippo Valsorda <valsorda@google.com>

commit 9a8006764336b71cd28ff313db1558865e6afc47 [browse]
Author: Bryan C. Mills
Date: 2018-12-04 17:00:19 -05:00

[release-branch.go1.10-security] cmd/go/internal/get: relax pathOK check to allow any letter

This fixes a regression of #18660 with the new path checks.

Change-Id: I07cd248392ba8f5f9b1614b79a323cca1ad1d46d
Reviewed-on: https://team-review.git.corp.google.com/c/372708
Reviewed-by: Dmitri Shuralyov <dmitshur@google.com>

commit aaa5f477540e6ef89de0da858a1334d05344d7fc [browse]
Author: Bryan C. Mills
Date: 2018-12-04 15:42:32 -05:00

[release-branch.go1.10-security] cmd/go/internal/get: use a strings.Replacer in expand

This should be a no-op, but produces deterministic (and more correct)
behavior if we have accidentally failed to sanitize one of the inputs.

Change-Id: I1271d0ffd01a691ec8c84906c4e02d9e2be19c72
Reviewed-on: https://team-review.git.corp.google.com/c/372707
Reviewed-by: Dmitri Shuralyov <dmitshur@google.com>

commit 7ef6ee2c5727f0d11206b4d1866c18e6ab4785be [browse]
Author: Bryan C. Mills
Date: 2018-12-04 14:37:39 -05:00

[release-branch.go1.10-security] cmd/go/internal/get: reject Windows shortnames as path components

Change-Id: Ia32d8ec1fc0c4e242f50d8871c0ef3ce315f3c65
Reviewed-on: https://team-review.git.corp.google.com/c/370573
Reviewed-by: Dmitri Shuralyov <dmitshur@google.com>