ecommerce-netlify icon indicating copy to clipboard operation
ecommerce-netlify copied to clipboard

Not safe to use

Open Arthurin opened this issue 8 months ago • 0 comments

Hi,

Isn't this a security issue ? Stripe api key is displayed in plain text in AppCard.vue : <card class="stripe-card" id="card" :class="{ complete }" stripe="pk_test_8ssZgwB2PiH0ajJksD2gVbsG00u7Y3IDPv" :options="stripeOptions" @change="complete = $event.complete" />

I read the articles explaining how this site is set up but the variable STRIPE_SECRET_KEY used in config.env is only for the backend.

Also I tried to made a test to purchase an article both with the live demo and locally, each time I ran into a 404 'resource_missing' for https://api.stripe.com/v1/payment_intents/pi_3R5qiIKEwvtXrERu1ClXy68B/confirm

I hope this will help newcomers to not waste time to much time 😉

Arthurin avatar Mar 23 '25 22:03 Arthurin