odoo
/
odoo
2
0
Fork 0
Code Pull Requests Releases Activity

[IMP] Use tempfile.mkstemp instead of os.tempname. mkstemp is more secure 

bzr revid: stephane@tinyerp.com-20090114075420-yfgsx5cz8pjxcrkf
This commit is contained in:
Stephane Wirtel 2009-01-14 08:54:20 +01:00
parent 974624a152
commit aaa22b707f
1 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
addons/document/content_index.py
View File

@ -23,6 +23,7 @@ import time
import os
import StringIO
import odt2txt
import tempfile
#
# This should be the indexer
@ -36,11 +37,10 @@ def content_index(content, filename=None, content_type=None):
stdin.close()
result = stdout.read().decode('latin1','replace').encode('utf-8','replace')
elif ext == '.pdf':
fname = os.tempnam(filename)+'.pdf'
fp = file(fname,'wb')
fp.write(content)
fp.close()
fp = os.popen('pdftotext -enc UTF-8 -nopgbrk '+fname+' -', 'r')
file_descriptor, file_name = tempfile.mkstemp(suffix=ext)
os.write(file_descriptor, content)
os.close(file_descriptor)
fp = os.popen('pdftotext -enc UTF-8 -nopgbrk '+file_name+' -', 'r')
result = fp.read()
fp.close()
elif ext in ('.xls','.ods','.odt','.odp'):
@ -52,4 +52,4 @@ def content_index(content, filename=None, content_type=None):
result = content
else:
result = content
return result
return result