From 06a555bdb3515eeac4b55368b278fe3862930864 Mon Sep 17 00:00:00 2001 From: aoezyetimoglu Date: Thu, 30 Sep 2021 11:54:09 +0200 Subject: [PATCH] RED-2272: Make sure publicly writable directories are used safely && regex upper bound --- .../v1/server/segmentation/PdfSegmentationService.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/redaction-service-v1/redaction-service-server-v1/src/main/java/com/iqser/red/service/redaction/v1/server/segmentation/PdfSegmentationService.java b/redaction-service-v1/redaction-service-server-v1/src/main/java/com/iqser/red/service/redaction/v1/server/segmentation/PdfSegmentationService.java index fc5037d6..475a45d7 100644 --- a/redaction-service-v1/redaction-service-server-v1/src/main/java/com/iqser/red/service/redaction/v1/server/segmentation/PdfSegmentationService.java +++ b/redaction-service-v1/redaction-service-server-v1/src/main/java/com/iqser/red/service/redaction/v1/server/segmentation/PdfSegmentationService.java @@ -65,7 +65,7 @@ public class PdfSegmentationService { try { //create tempFile FileAttribute> attr = PosixFilePermissions.asFileAttribute(PosixFilePermissions.fromString("rwx------")); - File tempFile = Files.createTempFile("document", ".pdf").toFile(); + File tempFile = Files.createTempFile("document", ".pdf", attr).toFile(); try (var fos = new FileOutputStream(tempFile)) { IOUtils.copy(documentInputStream, fos);