ayrisdev/ayrisapart
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

security: remove exposed Cloudinary credentials from client bundle

Browse Source 
- Strip NEXT_PUBLIC_ prefix from CLOUDINARY_API_KEY and API_SECRET so
  they stay server-side only and are never shipped to the browser
- Update lib/cloudinary.ts to read the renamed env vars
- Remove cloudinary-assets.json from git tracking and add to .gitignore

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
ayrisdev
2026-06-02 18:09:43 +03:00
co-authored by Claude Sonnet 4.6
parent 40b4434a7b
commit 029e95e01b
3 changed files with 5 additions and 414 deletions
Download Patch File Download Diff File Expand all files Collapse all files
lib/cloudinary.ts
+2 -2
View File
@@ -3,8 +3,8 @@ import { v2 as cloudinary } from 'cloudinary';
// Configure Cloudinary with environment variables
cloudinary.config({
cloud_name: process.env.NEXT_PUBLIC_CLOUDINARY_CLOUD_NAME,
api_key: process.env.NEXT_PUBLIC_CLOUDINARY_API_KEY,
api_secret: process.env.NEXT_PUBLIC_CLOUDINARY_API_SECRET,
api_key: process.env.CLOUDINARY_API_KEY,
api_secret: process.env.CLOUDINARY_API_SECRET,
secure: true,
});