Closed (fixed)
Project:
HTML Purifier
Version:
5.x-1.x-dev
Component:
Code
Priority:
Critical
Category:
Bug report
Assigned:
Unassigned
Reporter:
Created:
27 Aug 2008 at 10:29 UTC
Updated:
24 Jul 2009 at 01:00 UTC
Jump to comment: Most recent file
Comments
Comment #1
owen barton commentedAgreed on the need for this patch - it is bad form for Drupal to be writing any files outside of the configured directory.
Here is a patch that uses the standard method for creating and testing directories. It also uses the files directory, rather than the tmp directory (this cache can be permanent) which is in line with other caches (imagecache, css aggregation etc). It keeps the 2 directory levels, in case htmlpurifier needs additional caches in the future.
Comment #2
owen barton commentedComment #3
ezyang commentedThis was fixed a long time ago. :-)