We've already discussed adding an option for auto-removal, but no 
production app should go without
reaping tempfiles, regardless of a valid end-point or not. I'm not "too 
busy to care", it's open-source, these
are group efforts. Piping through the file is just as dangerous if the 
writable stream is not implemented correctly,
which is often the case with node, say hello to memory bloat. Anyways this 
will be addressed for people who
do not properly perform garbage collection.

On Friday, 6 September 2013 16:25:08 UTC-7, Andrew Kelley wrote:
>
> http://andrewkelley.me/post/do-not-use-bodyparser-with-express-js.html
>
> in short, every post endpoint in which you use bodyParser is vulnerable to 
> an attack which can fill up your hard drive with temp files.
>

-- 
-- 
Job Board: http://jobs.nodejs.org/
Posting guidelines: 
https://github.com/joyent/node/wiki/Mailing-List-Posting-Guidelines
You received this message because you are subscribed to the Google
Groups "nodejs" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/nodejs?hl=en?hl=en

--- 
You received this message because you are subscribed to the Google Groups 
"nodejs" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.

Reply via email to