3 ms·

What shell is this? You use /tmp in an insecure way. Please use "mktemp -d" for creating temporary directories.

• StavrosK 8y ago
  It's fish. What's insecure about the way I'm using it?
  • jwilk 8y ago
    /tmp is world-writable. Any local user could create /tmp/fuckgit and stuff it with malicous code.
    • teddyh 8y ago
      Or create /tmp/fuckgit as a symbolic link beforehand, pointing to a directory which will be deleted by the first command in your function.
    • StavrosK 8y ago
      I see, thank you.