Remove Google Analytics token?
Closed this issue · 3 comments
I am not sure if your GA token (UA-118675595-2) should be hardcoded into all deployments of this. I was a bit surprised to find it there.
They also have tokens in their environment folder: https://github.com/naveedgol/apple-music-web-player/blob/master/src/environments/environment.prod.ts
@naveedgol You need to change your application tokens and revoke these that you have hardcoded in the repo. Then make the tokens either import from environment variables or from a config file. For example, keeping your environments folder and 2 files is perfectly fine. But in your actual repo, replace those with an "X" or something and then document that users need to replace those vars with their actual tokens in the README.
Google Analytics tracking ID doesn't reveal anything.