Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

.env file is open to the public with a simple google search #85

Open
chillmanstr8 opened this issue Dec 12, 2023 · 0 comments
Open

.env file is open to the public with a simple google search #85

chillmanstr8 opened this issue Dec 12, 2023 · 0 comments

Comments

@chillmanstr8
Copy link

Describe the bug
I did a google search for 'filetype:env "PASSWORD" and it returned your password.env file. Those should be private, encrypted variables if I'm not mistaken.

To Reproduce
Steps to reproduce the behavior:

  1. Go to google.com
  2. Type in filetype:env "PASSWORD"
  3. It is the 2nd result for me.

Expected behavior
Passwords are hashed or otherwise encrypted using variables that aren't accessible to the public.

https://github.com/amoraitis/TodoList/blob/develop/password.env

Not sure if it's a bug or just garbage testing values, but wanted to give a heads up.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant