opentox/opentox-ruby — Issue #6: Unsafe dataset POSTing
Author: amaunz
Created: 2011-11-18 07:32:18+00:00
State: open

dataset.rb:389 uses in save():

File.open("ot-post-file.rdf","w+") { |f| ... }

Suggest rewrite to use temp file instead of fixed file name "ot-post-file.rdf": http://ruby-doc.org/stdlib-1.9.2/libdoc/tempfile/rdoc/Tempfile.html, because co-occurring requests to dataset save() can conflict as it is now. See also http://ruby.about.com/od/beginningruby/a/dir4.htm for background info.