Hi Sander,
On Wednesday, December 5, 2018 at 5:27:36 AM UTC+1, Sander Elias wrote: > > Hi Zlatko, > > Doesn't that pull the entire package.json into your build? > That means that you putt all available attack vectors into the public part > of your code, right? (yeah, it saddens me that I do have to think about > stuff like this...) > > > Oops, you're right, it does, I've just checked. I was not aware of this - and even though the app where this is used is still in development, and only has been planned as an internal tool, I'm removing it instantly. I guess it's back to generated *env* files again. Zlatko -- You received this message because you are subscribed to the Google Groups "Angular and AngularJS discussion" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/group/angular. For more options, visit https://groups.google.com/d/optout.
