.csearchindex is world-readable
GoogleCodeExporter opened this issue · comments
The file .csearchindex is by word-readable by default. This might be a security
issue because it may allow an attacker to get pieces of information about files
it cannot read, such as filenames of files in directories that are not world
readable or reconstructed contents of files that are not world readable.
I could provide a patch, although I believe this is easy to fix.
Original issue reported on code.google.com by fuz...@gmail.com on 26 Aug 2013 at 9:30
This issue was closed by revision 3de5a76ef32a.
Original comment by rsc@swtch.com on 6 Sep 2013 at 8:06
- Changed state: Fixed
- Added labels: ****
- Removed labels: ****