search

sahilsk11 / glide

Debug your resume in one click
https://glidecv.com
GNU General Public License v3.0
92 stars 14 forks source link

Leaked Mongo instance in db_connection.py #4

Closed BonitaTerror closed 3 years ago

BonitaTerror commented 3 years ago

Hello, saw this on tik tok. I noticed the password for your mongo instance is imported from some module that isn't included in the repo (which is good), but the username and uri are in the file. I feel that these should be put into an environment variable, especially if it's the same instance you use for glidecv.com. I can do so if you would accept a PR :smile:

sahilsk11 commented 3 years ago

Just created a new DB user specifically for this instance and moved username to another file. Thanks!