{"version":"2.1.53","anchor":"improved-file-operation-security","canonical_anchor":"improved-file-operation-security","heading":"Improved File Operation Security","tier":null,"area":null,"scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.53\/e\/improved-file-operation-security","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.53","markdown":"### Improved File Operation Security\n\nFile creation and log file operations now use more secure flag combinations:\n\n- `O_EXCL` flag added for temp file creation (prevents TOCTOU race conditions)\n- `O_NOFOLLOW` flag used on supported platforms (prevents symlink-following attacks)\n- Log file open now uses explicit flag combinations (`O_WRONLY | O_CREAT | O_APPEND | O_NOFOLLOW`) instead of the legacy `\"a\"` mode string\n\n**Evidence**\n\nNew file security flags (search for `\"O_NOFOLLOW\"`)"}