tabshift/payload
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore(templates): remove console.log that logs payload secret for security (#10095)

Browse Source 
I noticed that payload.secret was getting logged via console.log, adding
a significant security risk.
Removed the console.log statements from three preview/route.ts files.
This commit is contained in:
Shrinidhi Shastri
2024-12-20 22:31:47 +05:30
committed by GitHub
parent a501e604d6
commit dec87e971a
3 changed files with 0 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
examples/draft-preview/src/app/(app)/next/preview/route.ts
View File

@@ -53,7 +53,6 @@ export async function GET(
headers: req.headers, headers: req.headers,
}) })
} catch (error) { } catch (error) {
console.log({ token, payloadSecret: payload.secret })
payload.logger.error({ err: error }, 'Error verifying token for live preview') payload.logger.error({ err: error }, 'Error verifying token for live preview')
return new Response('You are not allowed to preview this page', { status: 403 }) return new Response('You are not allowed to preview this page', { status: 403 })
} }

1
templates/website/src/app/(frontend)/next/preview/route.ts
View File

@@ -51,7 +51,6 @@ export async function GET(
headers: req.headers, headers: req.headers,
}) })
} catch (error) { } catch (error) {
console.log({ token, payloadSecret: payload.secret })
payload.logger.error({ err: error }, 'Error verifying token for live preview') payload.logger.error({ err: error }, 'Error verifying token for live preview')
return new Response('You are not allowed to preview this page', { status: 403 }) return new Response('You are not allowed to preview this page', { status: 403 })
} }

1
templates/with-vercel-website/src/app/(frontend)/next/preview/route.ts
View File

@@ -51,7 +51,6 @@ export async function GET(
headers: req.headers, headers: req.headers,
}) })
} catch (error) { } catch (error) {
console.log({ token, payloadSecret: payload.secret })
payload.logger.error({ err: error }, 'Error verifying token for live preview') payload.logger.error({ err: error }, 'Error verifying token for live preview')
return new Response('You are not allowed to preview this page', { status: 403 }) return new Response('You are not allowed to preview this page', { status: 403 })
} }