Never let a provider error leak your API token
The request URL contains your key. Flash it in an error and anyone who can make the provider fail can read it.
Tagged “logging”
2 entries
2 entries
The request URL contains your key. Flash it in an error and anyone who can make the provider fail can read it.
Every admin action and every login, with who, what, from where. Append-only, and never editable from the panel that writes it.