| ||
Your code may be sinful if it exhibits one or more of the following properties:
It accesses files based on filenames beyond your control.
You access files using solely filenames and not file handles or file descriptors.
You open temporary files in public directories, where the temporary filename is guessable.