3 ms·
It’s crucial to always use an allow-list approach to passing config through to a client.
by danenania 5y ago
It’s crucial to always use an allow-list approach to passing config through to a client.
- ratww 5y agoYep. Maybe just forbidding enumerating environment variables in the runtime would be enough for this case. However the CI shouldn’t have backend-only private variables available to frontend builds… some separation here would be safer regardless of developer mistakes.