kotovalexarian-likes-github/ruby--ruby
1
0
Fork 0
mirror of https://github.com/ruby/ruby.git synced 2022-11-09 12:17:21 -05:00
Code Releases Activity

Clarify Dir.mktmpdir's change

Browse source 
`FileUtils.remove_entry_secure` checks `world_writable?` (and `sticky?`) only.
[ci skip]
ref https://github.com/rurema/doctree/pull/805

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@60745 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
This commit is contained in:
kazu 2017-11-12 07:05:58 +00:00
parent 6f3ca72cb8
commit e3fcf44afe
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
doc/NEWS-2.0.0
View file

@ -497,7 +497,7 @@ with all sufficient information, see the ChangeLog file.
* Dir.mktmpdir uses FileUtils.remove_entry instead of * Dir.mktmpdir uses FileUtils.remove_entry instead of
FileUtils.remove_entry_secure. This means that applications should not FileUtils.remove_entry_secure. This means that applications should not
change the permission of the created temporary directory to make change the permission of the created temporary directory to make
accessible from other users. writable from other users.
* yaml * yaml
* Syck has been removed. YAML now completely depends on libyaml being * Syck has been removed. YAML now completely depends on libyaml being