Skip to content

fix: do not expose token in public runtime config#41

Merged
atinux merged 3 commits intomainfrom
fix/token
Apr 11, 2023
Merged

fix: do not expose token in public runtime config#41
atinux merged 3 commits intomainfrom
fix/token

Conversation

@danielroe
Copy link
Collaborator

❓ Type of change

  • 📖 Documentation (updates to the documentation or readme)
  • 🐞 Bug fix (a non-breaking change that fixes an issue)
  • 👌 Enhancement (improving an existing functionality like performance)
  • ✨ New feature (a non-breaking change that adds functionality)
  • 🧹 Chore (updates to the build process or auxiliary tools and libraries)
  • ⚠️ Breaking change (fix or feature that would cause existing functionality to change)

📚 Description

This only seems to be used in a server route, but we are leaking it in rendered HTML.

const gq = graphql.defaults({
headers: {
authorization: `token ${options.token}`
}
})

📝 Checklist

  • I have linked an issue or discussion.
  • I have updated the documentation accordingly.

@danielroe danielroe added the bug Something isn't working label Apr 11, 2023
@danielroe danielroe requested a review from atinux April 11, 2023 09:50
@danielroe danielroe self-assigned this Apr 11, 2023
@netlify
Copy link

netlify bot commented Apr 11, 2023

Deploy Preview for nuxt-github-module failed.

Name Link
🔨 Latest commit f1db5b7
🔍 Latest deploy log https://app.netlify.com/sites/nuxt-github-module/deploys/64352ed7caa6ef0008eebfaa

@atinux atinux merged commit 5490c43 into main Apr 11, 2023
@atinux atinux deleted the fix/token branch April 11, 2023 10:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants