fix: Fixed use of insecure 'Path.GetTempFileName' in ExternalRefSorte…

…r.cs (#651) Fixes: https://sonarcloud.io/project/issues?resolved=false&types=VULNERABILITY&id=nikcio_lucenenet&open=AYPAuQCxhbfJOGLOobvQ https://sonarcloud.io/project/issues?resolved=false&types=VULNERABILITY&id=nikcio_lucenenet&open=AYPAuQCxhbfJOGLOobvR
apache · Oct 14, 2022 · 5988c77 · 5988c77
1 parent edc85af
commit 5988c77
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/Lucene.Net.Suggest/Suggest/Fst/ExternalRefSorter.cs b/src/Lucene.Net.Suggest/Suggest/Fst/ExternalRefSorter.cs
@@ -39,7 +39,7 @@ public class ExternalRefSorter : IBytesRefSorter, IDisposable
         public ExternalRefSorter(OfflineSorter sort)
         {
             this.sort = sort;
-            this.input = new FileInfo(Path.GetTempFileName());
+            this.input = new FileInfo(Path.Combine(Path.GetTempPath(), Path.GetRandomFileName()));
             this.writer = new OfflineSorter.ByteSequencesWriter(input);
         }
 
@@ -58,7 +58,7 @@ public virtual IBytesRefEnumerator GetEnumerator()
             {
                 CloseWriter();
 
-                sorted = new FileInfo(Path.GetTempFileName());
+                sorted = new FileInfo(Path.Combine(Path.GetTempPath(), Path.GetRandomFileName()));
                 sort.Sort(input, sorted);
 
                 input.Delete();