From 77b8d8cb6d6d6345f479c68c4892291c1492ba7e Mon Sep 17 00:00:00 2001 From: Chris Lamb Date: Wed, 23 Dec 2015 17:08:40 +0000 Subject: Discouraged use of /tmp with predictable names. The use of predictable filenames in /tmp often leads to symlink attacks so remove the most obvious use of them in the docs. --- docs/topics/files.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'docs/topics') diff --git a/docs/topics/files.txt b/docs/topics/files.txt index ce8a5c75a0..81b82e3d73 100644 --- a/docs/topics/files.txt +++ b/docs/topics/files.txt @@ -91,7 +91,7 @@ using a Python built-in ``file`` object:: >>> from django.core.files import File # Create a Python file object using open() - >>> f = open('/tmp/hello.world', 'w') + >>> f = open('/path/to/hello.world', 'w') >>> myfile = File(f) Now you can use any of the documented attributes and methods @@ -103,7 +103,7 @@ The following approach may be used to close files automatically:: >>> from django.core.files import File # Create a Python file object using open() and the with statement - >>> with open('/tmp/hello.world', 'w') as f: + >>> with open('/path/to/hello.world', 'w') as f: ... myfile = File(f) ... myfile.write('Hello World') ... -- cgit v1.3