From 9ed527779ead74e7268f893116c1527dcbe7f523 Mon Sep 17 00:00:00 2001 From: CJ van den Berg Date: Wed, 29 Oct 2025 17:07:07 +0100 Subject: [PATCH] fix: do not use installer script basename in temporary download directory template The script may be called anything by the user or curl or bash, so to be a little safer we instead just use a static string for the temporary directory name. --- assets/install | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/assets/install b/assets/install index ceddfc7..e69b8ca 100644 --- a/assets/install +++ b/assets/install @@ -204,7 +204,7 @@ if [ "$debug" -eq 1 ]; then fi url="https://github.com/$repo/releases/download/$version/$filename.$ext" -tmp_path="$(mktemp -t -d "$(basename "$0").XXXXX")" +tmp_path="$(mktemp -t -d "flow-control-installer.XXXXX")" if [ -z "$tmp_path" ] || [ "$tmp_path" = "/" ]; then echo "failed to create a temporary download directory"