FOP-3284: Reduce access rights to temp files

Author: simonsteiner1984

fop-core/src/main/java/org/apache/fop/apps/io/ResourceResolverFactory.java

@@ -26,6 +26,7 @@
 import java.io.OutputStream;
 import java.net.MalformedURLException;
 import java.net.URI;
+import java.nio.file.Files;
 import java.util.Collections;
 import java.util.HashMap;
 import java.util.Map;
@@ -176,7 +177,7 @@ private File getTempFile(String uri) throws IllegalStateException {
         }
 
         private File createTempFile(String path) throws IOException {
-            File tempFile = File.createTempFile(path, ".fop.tmp");
+            File tempFile = Files.createTempFile(path, ".fop.tmp").toFile();
             File oldFile = tempFiles.put(path, tempFile);
             if (oldFile != null) {
                 String errorMsg = oldFile.getAbsolutePath() + " has been already created for " + path;

fop-core/src/main/java/org/apache/fop/pdf/TempFileStreamCache.java

@@ -23,6 +23,7 @@
 import java.io.IOException;
 import java.io.InputStream;
 import java.io.OutputStream;
+import java.nio.file.Files;
 
 import org.apache.commons.io.IOUtils;
 
@@ -47,8 +48,8 @@ public class TempFileStreamCache implements StreamCache {
      * @throws IOException if there is an IO error
      */
     public TempFileStreamCache() throws IOException {
-        tempFile = File.createTempFile("org.apache.fop.pdf.StreamCache-",
-                                       ".temp");
+        tempFile = Files.createTempFile("org.apache.fop.pdf.StreamCache-",
+                                       ".temp").toFile();
         tempFile.deleteOnExit();
     }