File tree Expand file tree Collapse file tree 1 file changed +5
-5
lines changed
javascript/ql/src/Security/CWE-377 Expand file tree Collapse file tree 1 file changed +5
-5
lines changed Original file line number Diff line number Diff line change 33
44<overview >
55<p >
6- Temporary files created in the operating system tmp directory are by default accessible
7- to other users. This can in some cases lead to information exposure, or in the worst
8- case to remote code execution.
6+ Temporary files created in the operating system's temporary directory are by default accessible
7+ to other users. In some cases, this can lead to information exposure, or in the worst
8+ case, to remote code execution.
99</p >
1010</overview >
1111
1212<recommendation >
1313<p >
14- Use a well tested library like <a href =" https://www.npmjs.com/package/tmp" >tmp</a >
14+ Use a well- tested library like <a href =" https://www.npmjs.com/package/tmp" >tmp</a >
1515for creating temporary files. These libraries ensure both that the file is inaccessible
1616to other users and that the file does not already exist.
1717</p >
1818</recommendation >
1919
2020<example >
2121<p >
22- The following example creates a temporary file in the operating system tmp directory.
22+ The following example creates a temporary file in the operating system's temporary directory.
2323</p >
2424<sample src =" examples/insecure-temporary-file.js" />
2525
You can’t perform that action at this time.
0 commit comments