Only allow current user to read/write CLI prefs

abnegate · abnegate · commit fcb1ed89274a · 2023-05-03T12:44:21.000+12:00
diff --git a/templates/cli/lib/config.js.twig b/templates/cli/lib/config.js.twig
@@ -15,7 +15,6 @@ class Config {
             const file = fs.readFileSync(this.path).toString();
             this.data = JSONbig.parse(file);
         } catch (e) {
-            // console.log(`${this.path} not found. Empty data`);
             this.data = {};
         }
     }
@@ -25,7 +24,7 @@ class Config {
         if (!fs.existsSync(dir)) {
             fs.mkdirSync(dir, { recursive: true });
         }
-        fs.writeFileSync(this.path, JSONbig.stringify(this.data, null, 4));
+        fs.writeFileSync(this.path, JSONbig.stringify(this.data, null, 4), { mode: 0o600 });
     }
 
     get(key) {

Original file line number	Diff line number	Diff line change
`@@ -15,7 +15,6 @@ class Config {`
`15`	`15`	`const file = fs.readFileSync(this.path).toString();`
`16`	`16`	`this.data = JSONbig.parse(file);`
`17`	`17`	`} catch (e) {`
`18`		- // console.log(`${this.path} not found. Empty data`);
`19`	`18`	`this.data = {};`
`20`	`19`	`}`
`21`	`20`	`}`
`@@ -25,7 +24,7 @@ class Config {`
`25`	`24`	`if (!fs.existsSync(dir)) {`
`26`	`25`	`fs.mkdirSync(dir, { recursive: true });`
`27`	`26`	`}`
`28`		`- fs.writeFileSync(this.path, JSONbig.stringify(this.data, null, 4));`
	`27`	`+ fs.writeFileSync(this.path, JSONbig.stringify(this.data, null, 4), { mode: 0o600 });`
`29`	`28`	`}`
`30`	`29`
`31`	`30`	`get(key) {`