Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Hardcoded Sensitive Data: The bridgeKeystore #215

Open
ksibisamir opened this issue May 26, 2023 · 0 comments
Open

Hardcoded Sensitive Data: The bridgeKeystore #215

ksibisamir opened this issue May 26, 2023 · 0 comments

Comments

@ksibisamir
Copy link
Contributor

In the config.js file, the bridgeKeystore object appears to contain sensitive data that is currently hardcoded. This practice can lead to potential security risks, as the data could be exposed to unauthorized access.

To address this issue, it is recommended to:

Remove the hardcoded sensitive data from the config.js file.
Store this data securely. Depending on your environment and the specific data, this could mean using environment variables, a secure server, or a specialized secret management service.
Ensure that the data can be accessed securely when needed. This might involve setting up secure access to the environment variables or secret management service.
Remember to ensure any changes maintain the current functionality of the bridgeKeystore object.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant