summaryrefslogtreecommitdiff
path: root/docs/ref
diff options
context:
space:
mode:
authorChris Lamb <chris@chris-lamb.co.uk>2015-12-23 17:08:40 +0000
committerTim Graham <timograham@gmail.com>2015-12-24 09:57:02 -0500
commit91d46d2fb872a572dcd8e645b2d60be4d4c7ca24 (patch)
treede1dc77e8767bed17074415e8ad20b50a8e00417 /docs/ref
parent464128eb4ece1cef3bfd7e4b658d589dc095dbac (diff)
[1.8.x] Discouraged use of /tmp with predictable names.
The use of predictable filenames in /tmp often leads to symlink attacks so remove the most obvious use of them in the docs. Backport of 77b8d8cb6d6d6345f479c68c4892291c1492ba7e from master
Diffstat (limited to 'docs/ref')
-rw-r--r--docs/ref/django-admin.txt2
-rw-r--r--docs/ref/models/fields.txt2
2 files changed, 2 insertions, 2 deletions
diff --git a/docs/ref/django-admin.txt b/docs/ref/django-admin.txt
index 14b0c21367..3b73f9a26e 100644
--- a/docs/ref/django-admin.txt
+++ b/docs/ref/django-admin.txt
@@ -1963,5 +1963,5 @@ Output redirection
Note that you can redirect standard output and error streams as all commands
support the ``stdout`` and ``stderr`` options. For example, you could write::
- with open('/tmp/command_output') as f:
+ with open('/path/to/command_output') as f:
management.call_command('dumpdata', stdout=f)
diff --git a/docs/ref/models/fields.txt b/docs/ref/models/fields.txt
index 51e4b0de18..74d721afc4 100644
--- a/docs/ref/models/fields.txt
+++ b/docs/ref/models/fields.txt
@@ -778,7 +778,7 @@ Python file object like this::
from django.core.files import File
# Open an existing file using Python's built-in open()
- f = open('/tmp/hello.world')
+ f = open('/path/to/hello.world')
myfile = File(f)
Or you can construct one from a Python string like this::