langgenius/webapp-conversation
1
0
Fork 0
mirror of https://github.com/langgenius/webapp-conversation.git synced 2026-07-21 17:05:24 -04:00
Code Issues 9 Packages Projects Releases Wiki Activity

Security Issue: Internal API URL and Token exposed in client code. #36

New Issue
Closed
opened 2026-02-16 10:15:54 -05:00 by yindo · 1 comment
yindo commented 2026-02-16 10:15:54 -05:00
Owner
Copy Link
Copy Source

Originally created by @racerxdl on GitHub (Jul 15, 2024).

Currently the env APP_URL is getting exposed directly on client side because webpack adds it to the bundle. This is an issue because it exposed information about internal infrastructure and even the token for acessing the API directly.

Originally created by @racerxdl on GitHub (Jul 15, 2024). Currently the env APP_URL is getting exposed directly on client side because webpack adds it to the bundle. This is an issue because it exposed information about internal infrastructure and even the token for acessing the API directly.
yindo closed this issue 2026-02-16 10:15:54 -05:00
yindo commented 2026-02-16 10:15:54 -05:00
Author
Owner
Copy Link
Copy Source

@racerxdl commented on GitHub (Jul 15, 2024):

PS: This can be solved by removing the _PUBLIC prefix on the env variables (since they only need to be at backend side)

@racerxdl commented on GitHub (Jul 15, 2024): PS: This can be solved by removing the _PUBLIC prefix on the env variables (since they only need to be at backend side)
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
cant reproduce
pull-request
Mirrored from GitHub Pull Request
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
yindo
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: langgenius/webapp-conversation#36
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?