tools/go/vcs
Dmitri Shuralyov e8fdd2090a go/vcs: fix command injection in VCS path
Apply same change as CL 94656 did for cmd/go/internal/get, but for
golang.org/x/tools/go/vcs, to help keep them in sync.

It indirectly includes changes from CL 94603, since CL 94656 was
rebased on top of CL 94603.

Updates golang/go#23867.
Helps golang/go#11490.

Change-Id: I33eca1aba19f47bbe3e83d4ef9f9cc9a9c9ae975
Reviewed-on: https://go-review.googlesource.com/94899
Reviewed-by: Ian Lance Taylor <iant@golang.org>
Run-TryBot: Ian Lance Taylor <iant@golang.org>
TryBot-Result: Gobot Gobot <gobot@golang.org>
2018-02-21 04:00:24 +00:00
..
discovery.go go/vcs: workaround EOF bug in token-based XML decoder 2015-12-29 20:27:04 +00:00
env.go go.tools: add go/vcs 2013-08-15 09:00:02 -07:00
http.go go.tools: add go/vcs 2013-08-15 09:00:02 -07:00
vcs.go go/vcs: fix command injection in VCS path 2018-02-21 04:00:24 +00:00
vcs_test.go go/vcs: fix command injection in VCS path 2018-02-21 04:00:24 +00:00