From 77b8d8cb6d6d6345f479c68c4892291c1492ba7e Mon Sep 17 00:00:00 2001 From: Chris Lamb Date: Wed, 23 Dec 2015 17:08:40 +0000 Subject: Discouraged use of /tmp with predictable names. The use of predictable filenames in /tmp often leads to symlink attacks so remove the most obvious use of them in the docs. --- docs/ref/django-admin.txt | 2 +- docs/ref/models/fields.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) (limited to 'docs/ref') diff --git a/docs/ref/django-admin.txt b/docs/ref/django-admin.txt index f4df81d229..24ea5906ae 100644 --- a/docs/ref/django-admin.txt +++ b/docs/ref/django-admin.txt @@ -1784,5 +1784,5 @@ Output redirection Note that you can redirect standard output and error streams as all commands support the ``stdout`` and ``stderr`` options. For example, you could write:: - with open('/tmp/command_output') as f: + with open('/path/to/command_output') as f: management.call_command('dumpdata', stdout=f) diff --git a/docs/ref/models/fields.txt b/docs/ref/models/fields.txt index 033ae14778..6320f20e24 100644 --- a/docs/ref/models/fields.txt +++ b/docs/ref/models/fields.txt @@ -783,7 +783,7 @@ Python file object like this:: from django.core.files import File # Open an existing file using Python's built-in open() - f = open('/tmp/hello.world') + f = open('/path/to/hello.world') myfile = File(f) Or you can construct one from a Python string like this:: -- cgit v1.3