Skip to content

fix : remove console.log exposing Firebase API key in browser console #1882

Description

@tmdeveloper007

Summary of What Needs to be Done

Remove the console.log statement in frontend/src/utils/firebase.js that logs the Firebase API key to the browser console. Exposing API keys in client-side console output is a security concern as it can be read by anyone inspecting browser DevTools.

Changes that Need to be Made

  • Delete line 4 in frontend/src/utils/firebase.js:
    console.log("Firebase API Key:", import.meta.env.VITE_FIREBASE_API_KEY);

Impact that it would Provide

  • Eliminates a potential security risk where the Firebase API key could be exposed to unauthorized users via browser DevTools
  • Keeps production environment variables out of developer console output
  • Aligns with best practices for handling sensitive configuration in client-side code

Note: Please assign this issue to the tmdeveloper007 account.

Metadata

Metadata

Assignees

No one assigned

    Labels

    backendIssues related to server-side, database logic or APIsfrontendIssues related to UI/UX

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions