Account for TOCTOU bug

It's possible that `postcss.config.js` could be deleted, even if we check for its existence. Co-authored-by: Mike Burns <[email protected]>
thoughtbot · May 9, 2024 · 1b1795a · 1b1795a
1 parent 47199bf
commit 1b1795a
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/lib/generators/suspenders/styles_generator.rb b/lib/generators/suspenders/styles_generator.rb
@@ -63,7 +63,10 @@ def install_postcss_url
       end
 
       def configures_postcss
-        File.delete(postcss_config) if File.exist?(postcss_config)
+        begin
+          File.delete(postcss_config)
+        rescue Errno::ENOENT
+        end
 
         empty_directory "app/assets/static"
         create_file "app/assets/static/.gitkeep"