Summary of What Needs to be Done
Remove the console.log statement in frontend/src/utils/firebase.js that logs the Firebase API key to the browser console. Exposing API keys in client-side console output is a security concern as it can be read by anyone inspecting browser DevTools.
Changes that Need to be Made
- Delete line 4 in
frontend/src/utils/firebase.js:
console.log("Firebase API Key:", import.meta.env.VITE_FIREBASE_API_KEY);
Impact that it would Provide
- Eliminates a potential security risk where the Firebase API key could be exposed to unauthorized users via browser DevTools
- Keeps production environment variables out of developer console output
- Aligns with best practices for handling sensitive configuration in client-side code
Note: Please assign this issue to the tmdeveloper007 account.
Summary of What Needs to be Done
Remove the
console.logstatement infrontend/src/utils/firebase.jsthat logs the Firebase API key to the browser console. Exposing API keys in client-side console output is a security concern as it can be read by anyone inspecting browser DevTools.Changes that Need to be Made
frontend/src/utils/firebase.js:console.log("Firebase API Key:", import.meta.env.VITE_FIREBASE_API_KEY);Impact that it would Provide
Note: Please assign this issue to the
tmdeveloper007account.