4 ms·
Great explanation - client side apps often seem to be a bit of a catch-22 in some cases.
by greggsy 5y ago
Great explanation - client side apps often seem to be a bit of a catch-22 in some cases.
- danenania 5y agoIt’s crucial to always use an allow-list approach to passing config through to a client.
- ratww 5y agoYep. Maybe just forbidding enumerating environment variables in the runtime would be enough for this case. However the CI shouldn’t have backend-only private variables available to frontend builds… some separation here would be safer regardless of developer mistakes.