summaryrefslogtreecommitdiff
path: root/config.mk
diff options
context:
space:
mode:
authorDaniel Friesel <derf@finalrewind.org>2011-02-09 19:44:48 +0100
committerDaniel Friesel <derf@finalrewind.org>2011-02-09 19:49:28 +0100
commit23421a86cc826dd30f3dc4f62057fafb04b3ac40 (patch)
tree7c5fcaf8aceaf6df290721a8247e18d06bfc4bb0 /config.mk
parent15bd1c8bd3429ee565ba713fbc95af69a0c10c94 (diff)
imlib.c: Use wget --no-clobber
This prevents a (highly unlikely) case of an attacker knowing feh's PID and the user's URL rewriting user files by means of a TOCTTOU attack. It is still possible to _create_ arbitrary files via dangling symlinks. That will be fixed once I switch from wget to libcurl.
Diffstat (limited to 'config.mk')
0 files changed, 0 insertions, 0 deletions