thereido / RatingSync

Keep ratings from movie websites in sync
GNU General Public License v3.0
0 stars 1 forks source link

Bug Fix: Sensitive data is shown in page source #46

Open thereido opened 2 years ago

thereido commented 2 years ago

The page source is sent to the browser with the OMDb and TMDb API keys.

var OMDB_API_KEY = "<?php echo Constants::OMDB_API_KEY; ?>"; var TMDB_API_KEY = "<?php echo Constants::TMDB_API_KEY; ?>";

There is javascript code that needs the API key for making search calls. Is there a secure way to use sensitive data in javascript?