Skip to content

Add explicit null byte check in internal/command.New

Jacob Vosmaer requested to merge explicit-null-byte-check into master

Null bytes in command arguments get caught by the Go standard library already so this is not a security issue. However, the error you get from the stdlib is a bit cryptic.

This change adds a check in internal/command.New which will create an error that shows the bad argument using Go's %q format string (which will print the zero byte as \x00).

Merge request reports