flutter_dotenv
flutter_dotenv copied to clipboard
Security issue in release mode
The ".env" file remains in the "flutter_assets" folder in the release after converting the APK file to a ZIP file and extracting it.
Hey @muhammadkamel thanks for the issue. Please see my explanation on https://github.com/java-james/flutter_dotenv/issues/51#issuecomment-1040908470
This package is for managing front-end variables and is not intended for sensitive secrets.
@java-james , some way to put this as a big warning in the docs? I'm seeing a few open issues with developers who don't understand the difference between env and secrets.
@kev-techi Yep agree some learning info at the top of the readme should help developers understand and responsibly use this package