Used random file in a hidi folder to address security concerns.

Author: darrelmiller

src/Microsoft.OpenApi.Hidi/OpenApiService.cs

@@ -515,9 +515,15 @@ internal static async Task ShowOpenApiDocument(string openapi, string csdl, stri
                     // If output is null, create a HTML file in the user's temporary directory
                     if (output == null)
                     {
-                        var tempPath = Path.GetTempPath();
+                        var tempPath = Path.GetTempPath() + "/hidi/";
+                        if(!File.Exists(tempPath))
+                        {
+                            Directory.CreateDirectory(tempPath);
+                        }                                                
+                        
+                        var fileName = Path.GetRandomFileName();
 
-                        output = new FileInfo(Path.Combine(tempPath, "apitree.html"));
+                        output = new FileInfo(Path.Combine(tempPath, fileName + ".html"));
                         using (var file = new FileStream(output.FullName, FileMode.Create))
                         {
                             using var writer = new StreamWriter(file);
@@ -526,7 +532,7 @@ internal static async Task ShowOpenApiDocument(string openapi, string csdl, stri
                         logger.LogTrace("Created Html document with diagram ");
 
                         // Launch a browser to display the output html file
-                        var process = new Process();
+                        using var process = new Process();
                         process.StartInfo.FileName = output.FullName;
                         process.StartInfo.UseShellExecute = true;
                         process.Start();

test/Microsoft.OpenApi.Hidi.Tests/Services/OpenApiServiceTests.cs

@@ -80,6 +80,7 @@ public void ReturnOpenApiConvertSettingsWhenSettingsFileIsProvided(string filePa
             }
         }
 
+
         [Fact]
         public void ShowCommandGeneratesMermaidDiagramAsMarkdown()
         {
@@ -130,6 +131,22 @@ public async Task ShowCommandGeneratesMermaidMarkdownFileWithMermaidDiagram()
             Assert.Contains("graph LR", output);
         }
 
+        [Fact]
+        public void InvokeTransformCommand()
+        {
+            var rootCommand = Program.CreateRootCommand();
+            var args = new string[] { "transform", "-d", ".\\UtilityFiles\\SampleOpenApi.yml", "-o", "sample.json" };
+            var parseResult = rootCommand.Parse(args);
+            var handler = rootCommand.Subcommands.Where(c => c.Name == "transform").First().Handler;
+            var context = new InvocationContext(parseResult);
+
+            handler.Invoke(context);
+
+            var output = File.ReadAllText("sample.json");
+            Assert.NotEmpty(output);
+        }
+
+
         [Fact]
         public void InvokeShowCommand()
         {