don't use user input for repository path access
1 file changed, 1 insertion(+), 1 deletion(-)
changed files
M go.mod → go.mod
@@ -5,7 +5,6 @@ require ( alin.ovh/gomponents v1.8.0 github.com/bluekeyes/go-gitdiff v0.8.1 - github.com/cyphar/filepath-securejoin v0.6.0 github.com/dustin/go-humanize v1.0.1 github.com/fsnotify/fsnotify v1.9.0 github.com/go-git/go-git/v5 v5.16.3@@ -24,6 +23,7 @@ github.com/ProtonMail/go-crypto v1.3.0 // indirect github.com/andybalholm/brotli v1.2.0 // indirect github.com/aymerick/douceur v0.2.0 // indirect github.com/cloudflare/circl v1.6.1 // indirect + github.com/cyphar/filepath-securejoin v0.6.0 // indirect github.com/emirpasic/gods v1.18.1 // indirect github.com/fasthttp/router v1.5.4 // indirect github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect