Error : File Access

[ecopes]

Error : File Access

RuboCop 0.48.1 and earlier does not use /tmp in safe way, allowing local users to exploit this to tamper with cache files belonging to other users.

Category description: When user-supplied input can contain ".." or similar characters that are passed through to file access APIs, causing access to files outside of an intended subdirectory.
Solution: upgrade rubocop to >= 0.49.0

[scott]

Hi @ecopes thanks for contributing these issues! The issues may have been fixed in the master branch- can you please take a look at https://github.com/helpyio/helpy and see if you see the same issue there and if so, re-post there.