FileCreateTempFile.md

Pattern: Use of File.createTempFile()

Issue: -

Description

The File.createTempFile() method is insecure, and has been deprecated by the ESAPI secure coding library. It has been replaced by the ESAPI Randomizer.getRandomFilename(String) method.

Further Reading

• ESAPI API - Interface Randomizer
• OWASP - ESAPI Secure Coding Guideline
• CodeNarc - FileCreateTempFile