Fix createTempFile security (#1982)

Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>
This commit is contained in:
Avgustin Marinov
2024-11-09 14:36:52 +02:00
committed by GitHub
parent fe8fb3a602
commit 17fb7efe42

View File

@@ -108,6 +108,11 @@ public abstract class AbstractArtifactRepository implements ArtifactRepository {
private static File createTempFile() {
try {
final File file = Files.createTempFile(TEMP_FILE_PREFIX, TEMP_FILE_SUFFIX).toFile();
if (!(file.setReadable(true, true) &&
file.setWritable(true, true) &&
file.setExecutable(false))) {
throw new IOException("Can't set proper permissions!");
}
file.deleteOnExit();
return file;
} catch (final IOException e) {