The code is creating a secure temporary directory, but then creates the changelog alongside the tmpdir in the same base directory. This defeats the secure tmpdir creation, making the filename predictable. Inject a '/' between the tmpdir and the changelog filename.
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||