loafle/openapi-generator
3
0
Fork 0
forked from loafle/openapi-generator-original
Code Pull Requests Activity

[online] use Files.createTempFile to address security concerns (#8788)

Browse Source 
* use Files.createTempFile to address security concerns

* Update modules/openapi-generator-online/src/main/java/org/openapitools/codegen/online/service/Generator.java

Co-authored-by: Jonathan Leitschuh <Jlleitschuh@wpi.edu>

Co-authored-by: Jonathan Leitschuh <Jlleitschuh@wpi.edu>
This commit is contained in:
William Cheng 2021-02-24 00:33:06 +08:00 committed by GitHub
parent c653051997
commit c31e6e79d0
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
modules/openapi-generator-online/src/main/java/org/openapitools/codegen/online/service/Generator.java
View File

@ -35,6 +35,7 @@ import org.springframework.http.HttpStatus;
import org.springframework.web.server.ResponseStatusException; import org.springframework.web.server.ResponseStatusException;
import java.io.File; import java.io.File;
import java.nio.file.Files;
import java.util.ArrayList; import java.util.ArrayList;
import java.util.LinkedHashMap; import java.util.LinkedHashMap;
import java.util.List; import java.util.List;
@ -181,9 +182,7 @@ public class Generator {
private static File getTmpFolder() { private static File getTmpFolder() {
try { try {
File outputFolder = File.createTempFile("codegen-", "-tmp"); File outputFolder = Files.createTempDirectory("codegen-tmp").toFile();
outputFolder.delete();
outputFolder.mkdir();
outputFolder.deleteOnExit(); outputFolder.deleteOnExit();
return outputFolder; return outputFolder;
} catch (Exception e) { } catch (Exception e) {