Description: Fix for world readable cookie jar vulnerability
 This is the patch provided by upstream to fix the world readable
 cookie jar vulnerability filed as http://bugs.debian.org/659296.
 Thanks to Peter Hartman from the upstream for quick patch.
Author: Peter Hartman <peterjohnhartman@gmail.com>
Last-Update: 2012-02-10
Bug-Debian: http://bugs.debian.org/659296
Forwarded: http://lists.suckless.org/dev/1202/10972.html
--- a/surf.c	Wed Feb 01 15:23:39 2012 +0100
+++ b/surf.c	Fri Feb 10 11:46:18 2012 -0500
@@ -127,7 +127,7 @@
 		apath = g_strconcat(g_get_home_dir(), "/", path, NULL);
 	if((p = strrchr(apath, '/'))) {
 		*p = '\0';
-		g_mkdir_with_parents(apath, 0755);
+		g_mkdir_with_parents(apath, 0700);
 		*p = '/';
 	}
 	/* creating file (gives error when apath ends with "/") */
