Marc-André Bombeck 17fb291aaf fix(import): draw the extraction temp name from crypto randomness ...

The extracted export.xml lands in the shared system tmpdir under a
name built from the clock and Math.random, which is predictable enough
for a local pre-creation or symlink attack to aim at. The name comes
from crypto.randomBytes now. Flagged by code scanning on the import
path.

2026-08-13 07:55:07 +02:00

..

__tests__

feat(import): refuse an Apple Health import the heap cannot carry

2026-08-13 06:16:44 +02:00

csv-measurements.ts

fix(import): accept a blood-glucose reading that carries no context

2026-07-25 21:23:26 +02:00

unzip-export-xml.ts

fix(import): draw the extraction temp name from crypto randomness

2026-08-13 07:55:07 +02:00