Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
storage_local: Use File.open instead of Kernel.open
* https://www.rubydoc.info/gems/rubocop/RuboCop/Cop/Security/Open ``` `Kernel#open` and `URI.open` enable not only file access but also process invocation by prefixing a pipe symbol (e.g., `open(“| ls”)`). So, it may lead to a serious security risk by using variable input to the argument of `Kernel#open` and `URI.open`. It would be better to use `File.open`, `IO.popen` or `URI.parse#open` explicitly. ``` Signed-off-by: Hiroshi Hatake <hatake@clear-code.com>
- Loading branch information