medium10 pts · first answer countsnextjsweb-security
Secret key with NEXT_PUBLIC_ prefix
A developer names a payment secret key NEXT_PUBLIC_PAYMENT_SECRET so they can use it in a client component. What is the problem?
Discussion 0
Join free to post in the discussion.
Related questions
- Fixing a CORS errorFrontend Developer
- Where to keep a session tokenFrontend Developer
- useState in a Server ComponentFrontend Developer
- Preventing XSS from user HTMLFrontend Developer
- A CSP that stops injected scriptsFrontend Developer
- CSRF risk left with SameSite=LaxFrontend Developer
- Unsafe postMessage listenerFrontend Developer
- Browser blocks a call that curl allowsBackend Developer