covidwatchorg / portal

Covid Watch Portal web app for diagnosis verification
Apache License 2.0
8 stars 3 forks source link

Disable react dev tools #482

Closed ibeckermayer closed 4 years ago

ibeckermayer commented 4 years ago

closes https://github.com/covidwatchorg/portal/issues/481

Also removes some unnecessary logging. A truly motivated attacker could likely still figure out how to modify store state directly, i.e. https://blog.jscrambler.com/the-most-effective-way-to-protect-client-side-javascript-applications/. However given the very limited damage they could do (they could only see protected routes client-side, not access/modify protected data, I think this is enough protection for the time being.