#2112: Tmp Directory for Deluge-Web downloads
-----------------------+----------------------------------------------------
Reporter: baconseed | Owner: damoxc
Type: patch | Status: new
Priority: critical | Milestone: Future
Component: webui | Version: git master
Keywords: |
-----------------------+----------------------------------------------------
While server.py in ui/web has the correct method of creating a tempdir,
and using that tempdir to store files, json_api.py does not. This creates
a big security risk for multi-user environments, as they end up in /tmp/
on Linux systems, readable by world. Attached is a patch to resolve this
issue. It will create the tempdir, and use that to store torrent files, as
is done in server.py
--
Ticket URL: <http://dev.deluge-torrent.org/ticket/2112>
Deluge <http://deluge-torrent.org/>
Deluge project
--
You received this message because you are subscribed to the Google Groups
"Deluge Dev" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to
[email protected].
For more options, visit this group at
http://groups.google.com/group/deluge-dev?hl=en.
