higlass / higlass/simple-httpfs
Default use of /tmp/xx for the cache is probably unsafe
Open
- Dominant language
- Python
- Stars
- 37
- Forks
- 14
- PR merge metrics
- No merged PRs in 30d
Description
Predictable temporary filenames are a security risk. See the [OWASP guidance](https://owasp.org/www-community/vulnerabilities/Insecure_Temporary_File). I would suggest using Python's `TemporaryDirectory` by default instead. Users who need to persist the cache can do so in their own safely-created location.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.