Skip to content

Commit 4c317f5

Browse files
apply suggestions from doc review
Co-authored-by: Matt Pollard <mattpollard@users.noreply.github.com>
1 parent 35999a7 commit 4c317f5

File tree

1 file changed

+5
-5
lines changed

1 file changed

+5
-5
lines changed

javascript/ql/src/Security/CWE-377/InsecureTemporaryFile.qhelp

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -3,23 +3,23 @@
33

44
<overview>
55
<p>
6-
Temporary files created in the operating system tmp directory are by default accessible
7-
to other users. This can in some cases lead to information exposure, or in the worst
8-
case to remote code execution.
6+
Temporary files created in the operating system's temporary directory are by default accessible
7+
to other users. In some cases, this can lead to information exposure, or in the worst
8+
case, to remote code execution.
99
</p>
1010
</overview>
1111

1212
<recommendation>
1313
<p>
14-
Use a well tested library like <a href="https://www.npmjs.com/package/tmp">tmp</a>
14+
Use a well-tested library like <a href="https://www.npmjs.com/package/tmp">tmp</a>
1515
for creating temporary files. These libraries ensure both that the file is inaccessible
1616
to other users and that the file does not already exist.
1717
</p>
1818
</recommendation>
1919

2020
<example>
2121
<p>
22-
The following example creates a temporary file in the operating system tmp directory.
22+
The following example creates a temporary file in the operating system's temporary directory.
2323
</p>
2424
<sample src="examples/insecure-temporary-file.js" />
2525

0 commit comments

Comments
 (0)