Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Not safe to use #79

Open
Arthurin opened this issue Mar 23, 2025 · 0 comments
Open

Not safe to use #79

Arthurin opened this issue Mar 23, 2025 · 0 comments

Comments

@Arthurin
Copy link

Hi,

Isn't this a security issue ?
Stripe api key is displayed in plain text in AppCard.vue :
<card class="stripe-card" id="card" :class="{ complete }" stripe="pk_test_8ssZgwB2PiH0ajJksD2gVbsG00u7Y3IDPv" :options="stripeOptions" @change="complete = $event.complete" />

I read the articles explaining how this site is set up but the variable STRIPE_SECRET_KEY used in config.env is only for the backend.

Also I tried to made a test to purchase an article both with the live demo and locally, each time I ran into a 404 'resource_missing' for https://api.stripe.com/v1/payment_intents/pi_3R5qiIKEwvtXrERu1ClXy68B/confirm

I hope this will help newcomers to not waste time to much time 😉

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant