mirror of
https://github.com/django/django.git
synced 2025-10-24 06:06:09 +00:00
Discouraged use of /tmp with predictable names.
The use of predictable filenames in /tmp often leads to symlink attacks so remove the most obvious use of them in the docs.
This commit is contained in:
@@ -95,7 +95,7 @@ Here's how this might look in a fabfile::
|
||||
from fabric.contrib import project
|
||||
|
||||
# Where the static files get collected locally. Your STATIC_ROOT setting.
|
||||
env.local_static_root = '/tmp/static'
|
||||
env.local_static_root = '/path/to/static'
|
||||
|
||||
# Where the static files should go remotely
|
||||
env.remote_static_root = '/home/www/static.example.com'
|
||||
|
||||
Reference in New Issue
Block a user