Skip to content

Not safe to use #79

@Arthurin

Description

@Arthurin

Hi,

Isn't this a security issue ?
Stripe api key is displayed in plain text in AppCard.vue :
<card class="stripe-card" id="card" :class="{ complete }" stripe="pk_test_8ssZgwB2PiH0ajJksD2gVbsG00u7Y3IDPv" :options="stripeOptions" @change="complete = $event.complete" />

I read the articles explaining how this site is set up but the variable STRIPE_SECRET_KEY used in config.env is only for the backend.

Also I tried to made a test to purchase an article both with the live demo and locally, each time I ran into a 404 'resource_missing' for https://api.stripe.com/v1/payment_intents/pi_3R5qiIKEwvtXrERu1ClXy68B/confirm

I hope this will help newcomers to not waste time to much time 😉

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions