Smart (and simple) ways to prevent symlink attacks in Go

Go's os.Create silently truncates existing files, so a planted symlink can wipe data like logs. Trail of Bits explains why nil error checks miss this and how existence checks prevent symlink attacks.