mirror of
https://github.com/openclaw/openclaw.git
synced 2026-02-19 18:39:20 -05:00
Replace Math.random() with crypto.randomBytes() for generating temporary file names. Math.random() is predictable and can enable TOCTOU race conditions. Also set mode 0o600 on TTS temp files. Co-authored-by: sirishacyd <sirishacyd@gmail.com> Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>