Comment 0 for bug 1592402

Thanks to John Lenton for finding this.

$ cd /tmp
$ mkdir foo
$ hello-world.sh # from snap install hello-world
bash-4.3$ touch foo/bar
bash-4.3$ exit
$ ls /tmp/foo/
bar

We consider this a bug and not a security vulnerability because it is not attacker controlled.