diff options
| author | Chris Lamb <chris@chris-lamb.co.uk> | 2015-12-23 17:08:40 +0000 |
|---|---|---|
| committer | Tim Graham <timograham@gmail.com> | 2015-12-24 09:57:02 -0500 |
| commit | 91d46d2fb872a572dcd8e645b2d60be4d4c7ca24 (patch) | |
| tree | de1dc77e8767bed17074415e8ad20b50a8e00417 /docs/ref/models/fields.txt | |
| parent | 464128eb4ece1cef3bfd7e4b658d589dc095dbac (diff) | |
[1.8.x] Discouraged use of /tmp with predictable names.
The use of predictable filenames in /tmp often leads to symlink attacks
so remove the most obvious use of them in the docs.
Backport of 77b8d8cb6d6d6345f479c68c4892291c1492ba7e from master
Diffstat (limited to 'docs/ref/models/fields.txt')
| -rw-r--r-- | docs/ref/models/fields.txt | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/docs/ref/models/fields.txt b/docs/ref/models/fields.txt index 51e4b0de18..74d721afc4 100644 --- a/docs/ref/models/fields.txt +++ b/docs/ref/models/fields.txt @@ -778,7 +778,7 @@ Python file object like this:: from django.core.files import File # Open an existing file using Python's built-in open() - f = open('/tmp/hello.world') + f = open('/path/to/hello.world') myfile = File(f) Or you can construct one from a Python string like this:: |
