mirror of
https://github.com/github/codeql.git
synced 2025-12-24 04:36:35 +01:00
fix typos in documentation
Co-authored-by: Stephan Brandauer <kaeluka@github.com>
This commit is contained in:
committed by
GitHub
parent
2433eafef2
commit
573f17dc63
@@ -71,7 +71,7 @@ module InsecureTemporaryFile {
|
||||
}
|
||||
}
|
||||
|
||||
/** A a string that references the global tmp dir. Seen as a source for insecure temporary file creation. */
|
||||
/** A string that references the global tmp dir. Seen as a source for insecure temporary file creation. */
|
||||
class OSTempDir extends Source {
|
||||
OSTempDir() {
|
||||
this = DataFlow::moduleImport("os").getAMemberCall("tmpdir")
|
||||
|
||||
@@ -12,7 +12,7 @@ case to remote code execution.
|
||||
<recommendation>
|
||||
<p>
|
||||
Use a well tested library like <a href="https://www.npmjs.com/package/tmp">tmp</a>
|
||||
for creating temprary files. These libraries ensure both that the file is inaccesible
|
||||
for creating temporary files. These libraries ensure both that the file is inaccessible
|
||||
to other users and that the file does not already exist.
|
||||
</p>
|
||||
</recommendation>
|
||||
|
||||
Reference in New Issue
Block a user