mirror of
https://github.com/MBombeck/HealthLog.git
synced 2026-11-07 12:22:03 +00:00
chore(api): drop maintainer-name comment in analytics route
The Phase D security review flagged a "Marc's data (572 paired readings, …)" comment in the analytics route. It predates v1.4.20 but the file received new commits in this release, so neutralise the example to a generic "busy account" wording that conveys the same shape without leaking a maintainer name. Fixes Security-LOW-4. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
1 parent
346867b468
commit
cfe6d1c577
1 file changed
+6
-5
@@ -76,11 +76,12 @@ export const GET = apiHandler(async () => {
|
||||
// days. Up to v1.4.18 we filtered to the last 30 days at the DB
|
||||
// level and the headline (`bpInTargetPct`) was routed through
|
||||
// `windows.last30Days?.pct` — making the headline a literal copy
|
||||
// of the `30T` sub-value. For Marc's data (572 paired readings,
|
||||
// recent 30d = 50 %, all-time ≈ 11 %) the tile pinned 50/50/50
|
||||
// and looked algorithmically broken. The windowed helper now also
|
||||
// returns an independent `allTime` aggregate, which we surface as
|
||||
// the headline so the three numbers can diverge naturally.
|
||||
// of the `30T` sub-value. On a busy account (e.g. 572 paired
|
||||
// readings with recent 30d = 50 %, all-time ≈ 11 %) the tile
|
||||
// pinned 50/50/50 and looked algorithmically broken. The windowed
|
||||
// helper now also returns an independent `allTime` aggregate,
|
||||
// which we surface as the headline so the three numbers can
|
||||
// diverge naturally.
|
||||
const [sysData, diaData] = await Promise.all([
|
||||
prisma.measurement.findMany({
|
||||
where: { userId: user.id, type: "BLOOD_PRESSURE_SYS" },
|
||||
|
||||
Reference in new issue
Block a user