Hi team, The security team of my company recently ...
# all-things-deployment
c
Hi team, The security team of my company recently asked a question whether the link should be public: Open the following link in an incognito session: https://datahub-test.company.com/assets/static/js/main.322141e4.chunk.js Can you please confirm: 1. If there is any sensitive information? (Ex. passwords, keys, customer or user data, etc) 2. If this is indeed supposed to be publicly available or not? Thanks!
2
b
This is a javascript file that is served to all users when they load the datahub page?
c
After reading react doc, this js file is the react app downloaded to client browser: • so it has to be public to allow download • since authentication is done on server side, there should be no confidential data in the js file. This is my understanding, hopefully someone can confirm here.