Slack variables visible in Dev Tools
Closed this issue · 0 comments
dlaird-ovo commented
I spotted that when using DevTools the following config variables:
slack:
webhookUrl: "https://example.com"
token: ${SLACK_TOKEN}
conversationId: ABC123
conversationName: general
Are visible in plain text - I think a change like this will resolve it - add a config.d.ts
file at root
export interface Config {
slack: {
/**
* @visibility backend
*/
webhookUrl: string;
/**
* @visibility secret
*/
token: string;
/**
* @visibility backend
*/
conversationId: string;
/**
* @visibility backend
*/
conversationName: string;
};
};
}
And then add it to packages.json
...
"files": [
"dist",
"config.d.ts"
],
"configSchema": "config.d.ts"
...
I followed these guides
See here for why it must be done: