Re:When security goes right
by mnarayan01 on Friday December 26, 2014 @03:07PM
(#8800134)
Use a cron job to delete all the generated graphs every minute.
That doesn't strike me as all that great of a solution, since (at least naively) this is going to result in a small (but presumably non-trivial) number of 404s on initial load.
I guess if it's just a stopgap until a better solution could be implemented then it's fine.
Re:When security goes right
by cperciva on Friday December 26, 2014 @04:28PM
(#8800474)
If you mean the race between "create graph" / "graph is requested by browser" and deletion, that can be mitigated by not deleting any files which have been modified recently.
I guess if it's just a stopgap until a better solution could be implemented then it's fine.