Fix #2112 : World readable tmp directory in json_api

2012-09-29 17:01:28 +01:00 · 2012-09-29 17:01:28 +01:00 · b34e38df57
commit b34e38df57
parent 5188750332
1 changed files with 2 additions and 1 deletions
--- a/deluge/ui/web/json_api.py
+++ b/deluge/ui/web/json_api.py
@ -664,7 +664,8 @@ class WebApi(JSONComponent):
                log.error("Reason: %s", result.getErrorMessage())
            return result

-        tmp_file = os.path.join(tempfile.gettempdir(), url.split("/")[-1])
+        tempdir = tempfile.mkdtemp(prefix="delugeweb-")
+        tmp_file = os.path.join(tempdir, url.split("/")[-1])
        log.debug("filename: %s", tmp_file)
        headers = {}
        if cookie: