🛡️ Sentinel: [MEDIUM] 임시 파일 생성 시 안전한 권한(0644) 명시적 설정

[seonghobae]

🚨 Severity: MEDIUM
💡 Vulnerability: JVM의 기본 임시 파일 권한(0600)으로 인해 파일 이동 후에도 권한이 유지되어 웹 서버에서 403 Forbidden 오류를 유발할 수 있음.
🎯 Impact: 생성된 index.html 파일을 웹 서버가 읽을 수 없어 사용자에게 디렉토리 목록이 정상적으로 제공되지 않는 오류(가용성 침해) 발생 가능.
🔧 Fix: write_index_file 내 임시 파일 생성 시 POSIX 호환 환경의 경우 전역 읽기 가능 권한(0644)을 명시적으로 설정하도록 수정함. 100% 커버리지를 위해 파라미터 주입 방식으로 분기 처리 및 테스트 코드 추가.
✅ Verification: ./gradlew clean test 를 통해 새 테스트 케이스(POSIX 미지원 환경 대체 경로 테스트)를 포함하여 전체 테스트가 성공적으로 통과되는지 확인.

---

PR created automatically by Jules for task 8982359480121000914 started by @seonghobae

[google-labs-jules]

👋 Jules, reporting for duty! I'm here to lend a hand with this pull request.

When you start a review, I'll add a 👀 emoji to each comment to let you know I've read it. I'll focus on feedback directed at me and will do my best to stay out of conversations between you and other bots or reviewers to keep the noise down.

I'll push a commit with your requested changes shortly after. Please note there might be a delay between these steps, but rest assured I'm on the job!

For more direct control, you can switch me to Reactive Mode. When this mode is on, I will only act on comments where you specifically mention me with @jules. You can find this option in the Pull Request section of your global Jules UI settings. You can always switch back!

New to Jules? Learn more at jules.google/docs.

---

For security, I will only act on instructions from the user who triggered this task.

[coderabbitai]

Warning

Review limit reached

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Next included review available in 51 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 3580269b-15bb-4216-868a-4318c48d76e0

---

📥 Commits

Reviewing files that changed from the base of the PR and between 728f0f3 and 3788ab4.

---

📒 Files selected for processing (4)

• .jules/sentinel.md
• CHANGELOG.md
• src/main/kotlin/html4tree/main.kt
• src/test/kotlin/html4tree/MainTest.kt

---

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

---

_{Comment @coderabbitai help to get the list of available commands.}