Kaydet (Commit) 77b8d8cb authored tarafından Chris Lamb's avatar Chris Lamb Kaydeden (comit) Tim Graham

Discouraged use of /tmp with predictable names.

The use of predictable filenames in /tmp often leads to symlink attacks
so remove the most obvious use of them in the docs.
üst a856555d
......@@ -149,7 +149,7 @@ class FileDescriptor(object):
Assigns a file object on assignment so you can do::
>>> with open('/tmp/hello.world', 'r') as f:
>>> with open('/path/to/hello.world', 'r') as f:
... instance.file = File(f)
"""
def __init__(self, field):
......
......@@ -95,7 +95,7 @@ Here's how this might look in a fabfile::
from fabric.contrib import project
# Where the static files get collected locally. Your STATIC_ROOT setting.
env.local_static_root = '/tmp/static'
env.local_static_root = '/path/to/static'
# Where the static files should go remotely
env.remote_static_root = '/home/www/static.example.com'
......
......@@ -2404,7 +2404,7 @@ support the \fBstdout\fP and \fBstderr\fP options. For example, you could write:
.sp
.nf
.ft C
with open(\(aq/tmp/command_output\(aq) as f:
with open(\(aq/path/to/command_output\(aq) as f:
management.call_command(\(aqdumpdata\(aq, stdout=f)
.ft P
.fi
......
......@@ -1784,5 +1784,5 @@ Output redirection
Note that you can redirect standard output and error streams as all commands
support the ``stdout`` and ``stderr`` options. For example, you could write::
with open('/tmp/command_output') as f:
with open('/path/to/command_output') as f:
management.call_command('dumpdata', stdout=f)
......@@ -783,7 +783,7 @@ Python file object like this::
from django.core.files import File
# Open an existing file using Python's built-in open()
f = open('/tmp/hello.world')
f = open('/path/to/hello.world')
myfile = File(f)
Or you can construct one from a Python string like this::
......
......@@ -91,7 +91,7 @@ using a Python built-in ``file`` object::
>>> from django.core.files import File
# Create a Python file object using open()
>>> f = open('/tmp/hello.world', 'w')
>>> f = open('/path/to/hello.world', 'w')
>>> myfile = File(f)
Now you can use any of the documented attributes and methods
......@@ -103,7 +103,7 @@ The following approach may be used to close files automatically::
>>> from django.core.files import File
# Create a Python file object using open() and the with statement
>>> with open('/tmp/hello.world', 'w') as f:
>>> with open('/path/to/hello.world', 'w') as f:
... myfile = File(f)
... myfile.write('Hello World')
...
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment