Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

process.env 导致所有环境变量被注入打包完的js,存在安全风险 #314

Open
asurance opened this issue Jul 11, 2022 · 0 comments

Comments

@asurance
Copy link

src/util.ts中23行直接使用了process.env,导致我们的项目打包时将整个环境注入到js中,会存在安全风险

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant