mirror of
https://github.com/Heretek-AI/GDevelop-Heretek.git
synced 2026-10-12 02:02:42 +00:00
Claude
6088075274
The two Google API keys shipped in the source tree were publicly-leaked
upstream-owned secrets. They cannot be revoked from this fork; this change
replaces them with clearly-marked dummy placeholders that operators must
override via env vars at runtime.
- newIDE/app/src/Utils/GDevelopServices/ApiConfigs.js
GDevelopFirebaseConfig.apiKey now reads process.env.GD_FIREBASE_API_KEY
with a safe fallback placeholder.
- Extensions/Firebase/tests/FirebaseExtension.spec.js
Test firebaseConfig.apiKey now reads process.env.GD_TEST_FIREBASE_API_KEY.
- .gitignore: add .env / .env.* / secrets.json / credentials patterns.
- SECRETS.md + .env.example: document the required env vars.
- newIDE/app/src/Utils/GDevelopServices/ApiConfigs.spec.js (NEW):
regression tests that assert the apiKey is env-driven and never equals
either leaked value (verified via 8/6-char fingerprints so the full
secret never appears in this tree).
Verified:
newIDE/app: 132 suites, 1206 passed (was 131 / 1202), 1 skipped, 0 failed.
Lint clean on modified files.
No full leaked key strings in any tracked file.
Extensions for GDevelop
These are the "official" extensions directly bundled with GDevelop.
Writing your extensions or contributing to an existing one 😎
Most extensions can be written in JavaScript.
Read this README to learn everything about writing extensions for GDevelop.
License
- Extensions are provided under the MIT License: see LICENSE.md file.
- External libraries can be used by extensions (Box2D, Dlib or SPARK for example). See their licenses in their directories.