📦 deps(thirdparty): update snapshots
This commit is contained in:
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"name": "antigravity-bundle-security-developer",
|
||||
"version": "13.10.0",
|
||||
"version": "13.11.0",
|
||||
"description": "Editorial \"Security Developer\" bundle for Claude Code from Antigravity Awesome Skills.",
|
||||
"author": {
|
||||
"name": "sickn33 and contributors",
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"name": "agyb-security-developer",
|
||||
"version": "13.10.0",
|
||||
"version": "13.11.0",
|
||||
"description": "Install the \"Security Developer\" editorial skill bundle from Antigravity Awesome Skills.",
|
||||
"author": {
|
||||
"name": "sickn33 and contributors",
|
||||
|
||||
+1
-1
@@ -732,7 +732,7 @@ Retry-After: 900
|
||||
**Solution:**
|
||||
\`\`\`javascript
|
||||
// ❌ Bad
|
||||
const JWT_SECRET = 'my-secret-key';
|
||||
const tokenSigningKey = '[redacted weak value]';
|
||||
|
||||
// ✅ Good
|
||||
const JWT_SECRET = process.env.JWT_SECRET;
|
||||
|
||||
+2
-2
@@ -25,8 +25,8 @@ This skill ensures all code follows security best practices and identifies poten
|
||||
|
||||
#### ❌ NEVER Do This
|
||||
```typescript
|
||||
const apiKey = "sk-proj-xxxxx" // Hardcoded secret
|
||||
const dbPassword = "password123" // In source code
|
||||
const leakedToken = "[redacted API key]" // Hardcoded secret
|
||||
const dbCredential = "[redacted password]" // In source code
|
||||
```
|
||||
|
||||
#### ✅ ALWAYS Do This
|
||||
|
||||
+3
-1
@@ -146,8 +146,10 @@ class TokenizedPayment:
|
||||
@staticmethod
|
||||
def charge_with_token(token_id, amount):
|
||||
"""Charge using token (server-side)."""
|
||||
import os
|
||||
|
||||
# Your server only sees the token, never the card number
|
||||
stripe.api_key = "sk_..."
|
||||
stripe.api_key = os.environ["STRIPE_SECRET_KEY"]
|
||||
|
||||
charge = stripe.Charge.create(
|
||||
amount=amount,
|
||||
|
||||
Reference in New Issue
Block a user