dotenv-org
Cloaking feature reveals all secrets when loading a file
Not sure if something broke with my configuration, but this ruins the point of a cloaking feature, and I would recommend removing it if it can't be solved as it could give users a false sense of security.
(dont worry that Discord token isn't real)
You can barely see it in the GIF because of the low framerate, but it's WAY more noticeable in a video.
If someone is livestreaming on a platform like Twitch, someone could easily clip and pause the video, being able to write down that secret.
It happens when switching between tabs, as well as loading a new file. It always happens; takes about 200 ms for the secrets to get cloaked. Plenty of time for them to get snatched
unfortunately, so far, this appears to be a vscode limitation. i haven't been able to find a way around it. anyone have any ideas?
This also happens when you alt or option + click on a file, which opens the file in a new tab group. When it opens in the new tab group, it's not focused, but all the environment variables are completely visible.
