3 ms·
Just as a data point, this is also true about very much noeadays "vanilla" stacks like Next.js. It seems like you're doing SSR but not exactly. You return the
by adlpz 4y ago
Just as a data point, this is also true about very much noeadays "vanilla" stacks like Next.js.
It seems like you're doing SSR but not exactly.
You return the wrong prop in a getServerSideProps and boom, your stripe keys are dumped in a nice JSON for all to see.
- reilly3000 4y agoYikes!!! Is anyone aware of automated testing/scanning for secret leakage via js framework magic? If not, how would you implement one?