Lucene.Net.Support.IO.FileSupport::GetFileIOExceptionHResult(): Avoid…

… Path.GetTempFileName() because it is not secure. https://rules.sonarsource.com/csharp/RSPEC-5445
NightOwl888 · Nov 1, 2022 · 4166765 · 4166765
1 parent ada8990
commit 4166765
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/Lucene.Net/Support/IO/FileSupport.cs b/src/Lucene.Net/Support/IO/FileSupport.cs
@@ -60,7 +60,7 @@ internal static class FileSupport
             try
             {
                 // This could throw, but we don't care about this HResult value.
-                fileName = Path.GetTempFileName();
+                fileName = Path.Combine(Path.GetTempPath(), Path.GetRandomFileName()); // LUCENENET NOTE: Path.GetTempFileName() is considered insecure because the filename can be guessed https://rules.sonarsource.com/csharp/RSPEC-5445
             }
             catch
             {