56 ms·
Hard to believe they left such an obvious security hole open for 6 months. Any random PR can access environment variables? That's concerning for a project with
by clandad 1y ago
Hard to believe they left such an obvious security hole open for 6 months. Any random PR can access environment variables? That's concerning for a project with 20k+ stars.
- dominikdoesdev 1y agoYea, I'm not sure why the developer refuses to fix it. You can probably do a lot more than just read environment variables too.