I was able to confirm that os.Create() will happily follow symlinks.

Although standard tools like tar will not likely allow you to add two files with the same name to an archive file, it's certainly easy enough to do in code. This means that we need to add an additional check before writing to a destination to make sure that it's not a symlink outside of the destination.

The vulnerab

Feature request from @darookee

It would be nice if tags could be added and updated on documents via the REST API, as well as searching/filtering the /api/documents by them.

Ticket spun off from this comment.

Please leave a comment below to say a virtual "hello!" Let us know what brought you to the ArchivesSpace codebase, what you're working on, if you're looking for any collaborators to help you with your current or future projects, and any other questions or comments you might have.

Here's an example to get everyone started:

• Your Name: Lora Woodford
• Your Employer/Affiliation (if applicabl