pjfanning commented on PR #823: URL: https://github.com/apache/poi/pull/823#issuecomment-2973167254
Thanks for raising the bugzilla issue. I was actually talking about this though. > Not directly related to this PR, but while making the adjustments, I have noticed that DefaultTempFileCreationStrategy is buggy (at least I doubt its behavior is intended): When it detects that the temporary directory does not exist, then it will reset the directory to what is in java.io.tmpdir even if a different directory was specified in the constructor. I'm mentioning this only, because this issue can be a security risk (if someone changed the tmp dir due to security reasons), and this PR might make this issue more visible. This needs to be recorded somewhere if you don't intend to work on it. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@poi.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@poi.apache.org For additional commands, e-mail: dev-h...@poi.apache.org
