)]}'
{"docs/temp.md":[{"author":{"_account_id":11861,"name":"Travis McPeak","email":"tmcpeak@us.ibm.com","username":"travis-mcpeak"},"change_message_id":"2a25a05bac072f6a0cd28e3108a2c87a32abc1b3","unresolved":false,"context_lines":[{"line_number":1,"context_line":"Predictable temporary path"},{"line_number":2,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":3,"context_line":"Creating a temporary file on disk is a common practice, however it has the"},{"line_number":4,"context_line":"potential to be a source of problems. Naively creating such files using the"}],"source_content_type":"text/x-markdown","patch_set":2,"id":"5afe65bd_06b1af8f","line":1,"updated":"2015-06-02 14:53:50.000000000","message":"How is this related to the developer guidance on the same topic?  Is this meant to accomplish the same thing?  I\u0027d like to avoid having our Bandit text and the developer guidance for the same thing become out of synch...","commit_id":"f7eaf206b041051665a08df98b26006aefdf8c8b"},{"author":{"_account_id":11861,"name":"Travis McPeak","email":"tmcpeak@us.ibm.com","username":"travis-mcpeak"},"change_message_id":"61851871446426d7c0edcfe917308f327de9a9b8","unresolved":false,"context_lines":[{"line_number":4,"context_line":"potential to be a source of problems. Naively creating such files using the"},{"line_number":5,"context_line":"system wide ``/tmp`` folder for example, may result in predictable and"},{"line_number":6,"context_line":"unprotected file paths. This could allow an attacker to anticipate where"},{"line_number":7,"context_line":"temporary files will be found and to read or modified them. Manipulation of"},{"line_number":8,"context_line":"temporary files can result in the ability to control or damage a process or"},{"line_number":9,"context_line":"system, or gaining access to sensitive information. Please see [0] for more"},{"line_number":10,"context_line":"details."}],"source_content_type":"text/x-markdown","patch_set":2,"id":"5afe65bd_6163adb2","line":7,"updated":"2015-06-02 15:03:29.000000000","message":"* modify -- also probably worth mentioning DoS","commit_id":"f7eaf206b041051665a08df98b26006aefdf8c8b"},{"author":{"_account_id":11716,"name":"Tim Kelsey","email":"timothy.kelsey@uk.ibm.com","username":"tkelsey"},"change_message_id":"ec363b9d830e951437f606322821278fe461deca","unresolved":false,"context_lines":[{"line_number":4,"context_line":"potential to be a source of problems. Naively creating such files using the"},{"line_number":5,"context_line":"system wide ``/tmp`` folder for example, may result in predictable and"},{"line_number":6,"context_line":"unprotected file paths. This could allow an attacker to anticipate where"},{"line_number":7,"context_line":"temporary files will be found and to read or modified them. Manipulation of"},{"line_number":8,"context_line":"temporary files can result in the ability to control or damage a process or"},{"line_number":9,"context_line":"system, or gaining access to sensitive information. Please see [0] for more"},{"line_number":10,"context_line":"details."}],"source_content_type":"text/x-markdown","patch_set":2,"id":"5afe65bd_01e879e1","line":7,"in_reply_to":"5afe65bd_6163adb2","updated":"2015-06-02 15:13:03.000000000","message":"I do in the Consequences, but i can add it here","commit_id":"f7eaf206b041051665a08df98b26006aefdf8c8b"},{"author":{"_account_id":11861,"name":"Travis McPeak","email":"tmcpeak@us.ibm.com","username":"travis-mcpeak"},"change_message_id":"360a643dfb082347f373b8d5bb1585798758379e","unresolved":false,"context_lines":[{"line_number":6,"context_line":"unprotected file paths. This could allow an attacker to anticipate where"},{"line_number":7,"context_line":"temporary files will be found and to read or modify them. Manipulation of"},{"line_number":8,"context_line":"temporary files can result in the ability to control, deny or damage a process"},{"line_number":9,"context_line":"or system, or gaining access to sensitive information. Please see [0] for more"},{"line_number":10,"context_line":"details."},{"line_number":11,"context_line":""},{"line_number":12,"context_line":"### Correct"}],"source_content_type":"text/x-markdown","patch_set":3,"id":"5afe65bd_dc236804","line":9,"updated":"2015-06-02 15:24:21.000000000","message":"this should be *gain* access","commit_id":"55c4f8d3b6a3334ee5b503138c3d09d1cabe3024"}]}