getsafepay / safepay-node

Safepay node.js client
MIT License
7 stars 3 forks source link

Critical security/privacy info leaks in console logs #16

Open altafahmad1 opened 1 year ago

altafahmad1 commented 1 year ago

Console logs inside hooks.ts (not present in this repo but used inside it) leak private information that shouldn't be leaked

Description

There are leaks of info like API keys inside console logs that should never be visible to the clients using this. These are logged onto the console when the link generated by @sfpy/node-sdk is clicked and followed.

Screenshot

image

It's a very critical issue. Please solve it ASAP.