Skip to content
This repository has been archived by the owner on Jun 13, 2019. It is now read-only.

Key is revealed in debug console #226

Open
Palciny opened this issue Oct 3, 2017 · 0 comments
Open

Key is revealed in debug console #226

Palciny opened this issue Oct 3, 2017 · 0 comments

Comments

@Palciny
Copy link

Palciny commented Oct 3, 2017

Hi, I have created encoded message https://mzl.la/2yFqixl and looked to the developer console.
I was surprised when I saw there key I have encrypted message with.
storage is: Object { message: "πŸ­πŸ™†πŸŒ΄πŸš‚ πŸ’«πŸŒ΄πŸ’«πŸŒ΄ πŸš‚πŸ“£ πŸ’«πŸ“£πŸ’πŸ’«πŸŒ΄πŸŒπŸ‰πŸ‚πŸ’»πŸ‰ πŸ’β€πŸ’ΊπŸ‰πŸŒπŸ‰πŸ—Ύ πŸ πŸ’«πŸŒ΄πŸ’ΊπŸ‰ β›ͺπŸ˜„πŸ‘©πŸ“£ πŸŽ‰πŸ‰πŸ πŸŒ΄πŸ‘©πŸŒ΄πŸŒπŸ‰πŸš“πŸ‰πŸ™", key: "🍺" }

Than I have analyzed network activity and find out that
https://codemoji.org/app.js?v=880.3432085551322

return function:

function r() {
        var e = d(), t = e.queryGet();
        !_.isEmpty(t) && t.data && (p = f(t.data), e.querySet({}), c(e.toString()), console.debug("storage is:", p))
    }

Problem is that console.debug("storage is:", p) is called in production.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant