I would like to make a security edit (but all the answers repeat the same concern). I don't know how to proceed with the edit, and that is why I'm bringing the issue up on Meta.
There is this message: Adding an .env file to React Project. The question asks about adding a SECRET in the front, and all answers answer without security concerning how to store the SECRET. Only this little comment does.
In the first case, I thought about editing the first answer:
- Replace
my-secret-api-key
bymy-public-api-key
- Add a message, something like:
Do not store SECRET,
my-secret-api-key
in the react/front, use a serverside to store and do your requests.
But what about the other messages? Should I do the same?