Batch portfolio analysis was writing scripts to /tmp with default permissions (0o644), exposing the API key to other local users. Switch to tempfile.mkstemp + chmod 0o600, matching the single-analysis pattern. Also fix cancel_task cleanup to use glob patterns for tempfile-generated paths. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| api | ||
| main.py | ||