secure-env
secure-env copied to clipboard
important security bug
why if add console.log(global.env.token)
console show me my token not encrypted
this is big security Probleme
Thanks for raising the issue. Maintainer(s) will look into this shortly.
Shortly...
Is this actually a security issue? It appears to be working as intended.
Throughout the entire code the value should be decrypted so it can be accessed and used.
No values should be encrypted in the code unless you re-encrypt it using another library.