Function createSecureTempPath

src/security/securityConfig.ts:48–59

(prefix: string, extension: string = '.tmp')

 * Create a secure temporary file path
 */
export function createSecureTempPath(prefix: string, extension: string = '.tmp'): string {
  const tempDir = process.env.TEMP_DIR ?? os.tmpdir();
  
  if (!isAllowedTempDir(tempDir)) {
    throw new Error(`Temporary directory not allowed: ${tempDir}`);
  }
  
  const randomSuffix = generateSecureRandomSuffix();
  const filename = `${prefix}_${randomSuffix}${extension}`;
  
  return path.join(tempDir, filename);
}

// Dangerous character ranges (excluding tab and line feed)
const DANGEROUS_CHARS_REGEX = /[\u0000-\u0008\u000B\u000C\u000E-\u001F\u007F-\u009F]/g;