Rezzect/deluge
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix #2112 : World readable tmp directory in json_api

Browse Source
This commit is contained in:
baconseed 2012-09-29 17:01:28 +01:00 committed by Calum Lind
parent 5188750332
commit b34e38df57
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
deluge/ui/web/json_api.py
View File

@ -664,7 +664,8 @@ class WebApi(JSONComponent):
log.error("Reason: %s", result.getErrorMessage()) log.error("Reason: %s", result.getErrorMessage())
return result return result
tmp_file = os.path.join(tempfile.gettempdir(), url.split("/")[-1]) tempdir = tempfile.mkdtemp(prefix="delugeweb-")
tmp_file = os.path.join(tempdir, url.split("/")[-1])
log.debug("filename: %s", tmp_file) log.debug("filename: %s", tmp_file)
headers = {} headers = {}
if cookie: if cookie: