mirrors/deluge
0
0
Fork 0
mirror of https://git.deluge-torrent.org/deluge synced 2025-08-03 15:08:40 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fix #2112 : World readable tmp directory in json_api

Browse source
This commit is contained in:
baconseed 2012-09-29 17:01:28 +01:00 • committed by Calum Lind
commit b34e38df57
1 changed files with 2 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
deluge/ui/web/json_api.py
View file

@ -664,7 +664,8 @@ class WebApi(JSONComponent):
log.error("Reason: %s", result.getErrorMessage()) log.error("Reason: %s", result.getErrorMessage())
return result return result
tmp_file = os.path.join(tempfile.gettempdir(), url.split("/")[-1]) tempdir = tempfile.mkdtemp(prefix="delugeweb-")
tmp_file = os.path.join(tempdir, url.split("/")[-1])
log.debug("filename: %s", tmp_file) log.debug("filename: %s", tmp_file)
headers = {} headers = {}
if cookie: if cookie: