View Bazaar branches
Get this repository:
git clone
Members of Ubuntu Bug Control can upload to this repository. Log in for directions.

Tools used by the Ubuntu QA Team has 1 active review.


Name Last Modified Last Commit
master 2020-01-22 22:41:45 UTC 2020-01-22 Use shutil.copyfile() to avoid information disclosure

Author: Mike Salvatore
Author Date: 2020-01-22 20:58:36 UTC Use shutil.copyfile() to avoid information disclosure

The temporary cookies-XXXXXXXX.sqlite file is created by
tempfile.NamedTemporaryFile with 600 permissions. The shutil.copy()
function copies the permission from the source file to the destination
file. On my machine, mozilla has the cookies sqlite database permissions
set to 644. After shutil.copy() copies the cookies file, it then sets
the permission to 644, making your browser cookies world readable for a
brief period of time.

shutil.copyfile() does not attempt to copy permissions from the
source file and therefore leaves the 600 permissions intact.

support_esm 2019-07-08 20:16:36 UTC 2019-07-08
Reverting pep fix on space

Author: Maria Emilia Torino
Author Date: 2019-07-08 20:16:36 UTC

Reverting pep fix on space

12 of 2 results

Other repositories

Name Last Modified
lp:ubuntu-qa-tools 2020-01-22
lp:~legovini/ubuntu-qa-tools 2019-04-08
lp:~sbeattie/ubuntu-qa-tools/+git/ubuntu-qa-tools 2017-10-03
13 of 3 results
You can't create new repositories for Tools used by the Ubuntu QA Team.