I was able to confirm that os.Create() will happily follow symlinks.

Although standard tools like tar will not likely allow you to add two files with the same name to an archive file, it's certainly easy enough to do in code. This means that we need to add an additional check before writing to a destination to make sure that it's not a symlink outside of the destination.

The vulnerab

Blocked By: wix/vscode-glean#97

Example:

class Foo extends Component {

  render() {
    return (<div>
      {this.props.foo.map((bar) => <div>{bar.x}</div>)}
    </div>)
  }
}

Current:

 const Foo = props => {
   const foo = useRef();
   const x = useRef();
   return <div>
       {foo.current.map(bar => <div>{x.current}</div>)}
 

With questions that come up for first time users.

Hi, the program creates a file on:
C:\Users\USERNAME\AppData\Local\LessMsi\lessmsi-gui.exe_Url_2f40pggqe2qwc3oufnjnqq0l3gqel3k3\1.6.91.0\user.config

It would awesome if it were created only on the same folder where the executable is, so that it can be used as portable on a USB pendrive, and without leave traces.
Cheers.

Currently the code coverage is around 70%. Need help to write tests so as to obtain a code coverage above 90%