search

nemmons / aspire

A Simple Python Insurance Rating Engine
MIT License
11 stars 0 forks source link

Use tempfile module for storing temporary file uploads #3

Open nemmons opened 3 years ago

nemmons commented 3 years ago

We're not interested in permanently storing CSVs uploaded for rating. So, rather than configuring an upload folder, we should just use tempfile.mkdtemp() as outlined here https://security.openstack.org/guidelines/dg_using-temporary-files-securely.html (for added security)

nemmons commented 3 years ago

Flask might already be doing this internally - https://flask.palletsprojects.com/en/1.1.x/patterns/fileuploads/#improving-uploads