I reckon that's a serious bug. Nothing should ever get written to the webroot, it should be owned by root and inaccessible to the application.
I reckon that's a serious bug. Nothing should ever get written to the webroot, it should be owned by root and inaccessible to the application.