Do not give 777 permissions to a file
このページは日本語には対応しておりません。随時翻訳に取り組んでいます。
翻訳に関してご質問やご意見ございましたら、
お気軽にご連絡ください。
ID: javascript-node-security/chmod-permissions
Language: JavaScript
Severity: Warning
Category: Security
CWE: 732
Description
Always make sure you restrict permissions of your application files. Application files should not allow write and execution for other users as it may leak data and information. Always restrict the number of users and applications that can access your application data.
Non-Compliant Code Examples
const fs = require('fs');
const fsPromises = fs.promises;
fs.chmodSync("/tmp/myfile", 0o777);
fsPromises.chmod("/tmp/fsPromises", 0o777);
Compliant Code Examples
const fs = require('fs');
const fsPromises = fs.promises;
fs.chmodSync(myPath, 0o770);
fsPromises.chmod("/tmp/fsPromises", 0o770);
