https://bz.apache.org/bugzilla/show_bug.cgi?id=69715
Bug ID: 69715
Summary: DefaultTempFileCreationStrategy forgets the originally
set directory, if it doesn't exist
Product: POI
Version: unspecified
Hardware: PC
Status: NEW
Severity: normal
Priority: P2
Component: POI Overall
Assignee: dev@poi.apache.org
Reporter: attila.keleme...@gmail.com
Target Milestone: ---
If DefaultTempFileCreationStrategy detects that the temporary directory (given
in its constructor) disappears (i.e., does not exist), then it will revert back
to whatever is in the `java.io.tmpdir` system property.
This can be dangerous, if someone adjusted the directory due to security
concern, because then someone might delete the temporary directory to force the
application back into the global temporary directory. That said, I would
consider this a mild risk, since it requires that someone to be able to delete
the directory in the first place (but can be a nasty surprise anyway).
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@poi.apache.org
For additional commands, e-mail: dev-h...@poi.apache.org
