You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 21 Next »

Recommendations

Use file descriptors instead of filenames

FIO002 Translate filenames into canonical form before use

FIO003 Create temporary files in restricted directories

Rules

FIO30 Check file properties securely

FIO31 Detect and handle file operation errors

FIO032 Do not create tempory files with predictable names

FIO033 Verify path and filename parameters

FIO034 Do not make assumptions about the structure of the underlying filesystem

  • No labels