summaryrefslogtreecommitdiff
path: root/docs
diff options
context:
space:
mode:
authorChris Lamb <chris@chris-lamb.co.uk>2015-12-23 17:08:40 +0000
committerTim Graham <timograham@gmail.com>2015-12-24 09:54:33 -0500
commit77b8d8cb6d6d6345f479c68c4892291c1492ba7e (patch)
treea42ca617d80dcaaa3db36069688e141e154c4dc1 /docs
parenta856555df2a1b4ddad8bf21243de0bcbcc12fb20 (diff)
downloaddjango-77b8d8cb6d6d6345f479c68c4892291c1492ba7e.tar.gz
Discouraged use of /tmp with predictable names.
The use of predictable filenames in /tmp often leads to symlink attacks so remove the most obvious use of them in the docs.
Diffstat (limited to 'docs')
-rw-r--r--docs/howto/static-files/deployment.txt2
-rw-r--r--docs/man/django-admin.12
-rw-r--r--docs/ref/django-admin.txt2
-rw-r--r--docs/ref/models/fields.txt2
-rw-r--r--docs/topics/files.txt4
5 files changed, 6 insertions, 6 deletions
diff --git a/docs/howto/static-files/deployment.txt b/docs/howto/static-files/deployment.txt
index 396c8c85c0..da0427343e 100644
--- a/docs/howto/static-files/deployment.txt
+++ b/docs/howto/static-files/deployment.txt
@@ -95,7 +95,7 @@ Here's how this might look in a fabfile::
from fabric.contrib import project
# Where the static files get collected locally. Your STATIC_ROOT setting.
- env.local_static_root = '/tmp/static'
+ env.local_static_root = '/path/to/static'
# Where the static files should go remotely
env.remote_static_root = '/home/www/static.example.com'
diff --git a/docs/man/django-admin.1 b/docs/man/django-admin.1
index abb09f354a..3f07cc0e7a 100644
--- a/docs/man/django-admin.1
+++ b/docs/man/django-admin.1
@@ -2404,7 +2404,7 @@ support the \fBstdout\fP and \fBstderr\fP options. For example, you could write:
.sp
.nf
.ft C
-with open(\(aq/tmp/command_output\(aq) as f:
+with open(\(aq/path/to/command_output\(aq) as f:
management.call_command(\(aqdumpdata\(aq, stdout=f)
.ft P
.fi
diff --git a/docs/ref/django-admin.txt b/docs/ref/django-admin.txt
index f4df81d229..24ea5906ae 100644
--- a/docs/ref/django-admin.txt
+++ b/docs/ref/django-admin.txt
@@ -1784,5 +1784,5 @@ Output redirection
Note that you can redirect standard output and error streams as all commands
support the ``stdout`` and ``stderr`` options. For example, you could write::
- with open('/tmp/command_output') as f:
+ with open('/path/to/command_output') as f:
management.call_command('dumpdata', stdout=f)
diff --git a/docs/ref/models/fields.txt b/docs/ref/models/fields.txt
index 033ae14778..6320f20e24 100644
--- a/docs/ref/models/fields.txt
+++ b/docs/ref/models/fields.txt
@@ -783,7 +783,7 @@ Python file object like this::
from django.core.files import File
# Open an existing file using Python's built-in open()
- f = open('/tmp/hello.world')
+ f = open('/path/to/hello.world')
myfile = File(f)
Or you can construct one from a Python string like this::
diff --git a/docs/topics/files.txt b/docs/topics/files.txt
index ce8a5c75a0..81b82e3d73 100644
--- a/docs/topics/files.txt
+++ b/docs/topics/files.txt
@@ -91,7 +91,7 @@ using a Python built-in ``file`` object::
>>> from django.core.files import File
# Create a Python file object using open()
- >>> f = open('/tmp/hello.world', 'w')
+ >>> f = open('/path/to/hello.world', 'w')
>>> myfile = File(f)
Now you can use any of the documented attributes and methods
@@ -103,7 +103,7 @@ The following approach may be used to close files automatically::
>>> from django.core.files import File
# Create a Python file object using open() and the with statement
- >>> with open('/tmp/hello.world', 'w') as f:
+ >>> with open('/path/to/hello.world', 'w') as f:
... myfile = File(f)
... myfile.write('Hello World')
...