Secure temporary artifact names as well as final destinations
Checking the final artifact path for symlinks does not make an atomic writer safe when an actor can replace its predictable temporary sibling. Opening that temporary pathname for writing can redirect data outside the intended artifact before the rename. Hold the intended director…