ayrisdev/ayrisapart
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

security: remove exposed Cloudinary credentials from client bundle

Browse Source 
- Strip NEXT_PUBLIC_ prefix from CLOUDINARY_API_KEY and API_SECRET so
  they stay server-side only and are never shipped to the browser
- Update lib/cloudinary.ts to read the renamed env vars
- Remove cloudinary-assets.json from git tracking and add to .gitignore

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
ayrisdev
2026-06-02 18:09:43 +03:00
co-authored by Claude Sonnet 4.6
parent 40b4434a7b
commit 029e95e01b
3 changed files with 5 additions and 414 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitignore
+3
View File
@@ -41,3 +41,6 @@ yarn-error.log*
next-env.d.ts
/lib/generated/prisma
# Cloudinary asset lists (may contain internal folder structure)
cloudinary-assets.json