Repository navigation
dir option must always be relative to the standard tmp directory #207
Description
The dir option must be relative to the existing tmp directory that is provided by the process environment.
tmp will expect that the so defined directory is in place, otherwise it will fail as it will not create the directory by itself.
The current solution may pose issues and potential risk, see #205
The tmp directory should always and only be configured in the process environment and not by the application itself.
This might have a potential impact on existing applications and the change must be communicated well.
Activity
[-]dir option must be relative to the standard tmp directory[/-][+]dir option must always be relative to the standard tmp directory[/+]silkentrance commentedon Jan 24, 2020
see also #219
silkentrance commentedon Feb 3, 2020
having a dir option that is always relative to the os/environment provided temporary directory requires tmp to recursively create that directory, if it does not exist in order to relieve the user from doing so in every one of his applications.
we could use https://github.com/substack/node-mkdirp for that.
fix #179 #207 #218 #176 #236 #237 #238
fix #156 #207 #218 #176 #236 #237 #238
fix #156 #207 #218 #176 #236 #237 #238
Mitigate CVE-2025-54798 reported in raszi/node-tmp#207