Skip to content
Snippets Groups Projects
  • Olav Morken's avatar
    InfoCard: Fix insecure file creation. · 0d5557c6
    Olav Morken authored
    The InfoCard modules stores files in /tmp, but does this in a way that
    allows another user with local access to the machine to overwrite any
    file the webserver has access to.
    
    This patch fixes it by moving the files into the simpleSAMLphp temp
    directory.
    
    Thanks to Thijs Kinkhorst <thijs@uvt.nl> for reporting this bug.
    
    git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@2082 44740490-163a-0410-bde0-09ae8108e29a
    0d5557c6
Code owners
Assign users and groups as approvers for specific file changes. Learn more.
STS_card_issuer.php 9.00 KiB