{"action":"created","issue":{"url":"https://api.github.com/repos/fivetanley/ember-cli-dotenv/issues/20","repository_url":"https://api.github.com/repos/fivetanley/ember-cli-dotenv","labels_url":"https://api.github.com/repos/fivetanley/ember-cli-dotenv/issues/20/labels{/name}","comments_url":"https://api.github.com/repos/fivetanley/ember-cli-dotenv/issues/20/comments","events_url":"https://api.github.com/repos/fivetanley/ember-cli-dotenv/issues/20/events","html_url":"https://github.com/fivetanley/ember-cli-dotenv/pull/20","id":141948947,"number":20,"title":"Security clarification","user":{"login":"wkoffel","id":12754,"avatar_url":"https://avatars.githubusercontent.com/u/12754?v=3","gravatar_id":"","url":"https://api.github.com/users/wkoffel","html_url":"https://github.com/wkoffel","followers_url":"https://api.github.com/users/wkoffel/followers","following_url":"https://api.github.com/users/wkoffel/following{/other_user}","gists_url":"https://api.github.com/users/wkoffel/gists{/gist_id}","starred_url":"https://api.github.com/users/wkoffel/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wkoffel/subscriptions","organizations_url":"https://api.github.com/users/wkoffel/orgs","repos_url":"https://api.github.com/users/wkoffel/repos","events_url":"https://api.github.com/users/wkoffel/events{/privacy}","received_events_url":"https://api.github.com/users/wkoffel/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2016-03-18T18:49:34Z","updated_at":"2016-03-18T18:51:20Z","closed_at":"2016-03-18T18:50:04Z","pull_request":{"url":"https://api.github.com/repos/fivetanley/ember-cli-dotenv/pulls/20","html_url":"https://github.com/fivetanley/ember-cli-dotenv/pull/20","diff_url":"https://github.com/fivetanley/ember-cli-dotenv/pull/20.diff","patch_url":"https://github.com/fivetanley/ember-cli-dotenv/pull/20.patch"},"body":"Clarified important implication of clientAllowedKeys"},"comment":{"url":"https://api.github.com/repos/fivetanley/ember-cli-dotenv/issues/comments/198492464","html_url":"https://github.com/fivetanley/ember-cli-dotenv/pull/20#issuecomment-198492464","issue_url":"https://api.github.com/repos/fivetanley/ember-cli-dotenv/issues/20","id":198492464,"user":{"login":"wkoffel","id":12754,"avatar_url":"https://avatars.githubusercontent.com/u/12754?v=3","gravatar_id":"","url":"https://api.github.com/users/wkoffel","html_url":"https://github.com/wkoffel","followers_url":"https://api.github.com/users/wkoffel/followers","following_url":"https://api.github.com/users/wkoffel/following{/other_user}","gists_url":"https://api.github.com/users/wkoffel/gists{/gist_id}","starred_url":"https://api.github.com/users/wkoffel/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wkoffel/subscriptions","organizations_url":"https://api.github.com/users/wkoffel/orgs","repos_url":"https://api.github.com/users/wkoffel/repos","events_url":"https://api.github.com/users/wkoffel/events{/privacy}","received_events_url":"https://api.github.com/users/wkoffel/received_events","type":"User","site_admin":false},"created_at":"2016-03-18T18:51:19Z","updated_at":"2016-03-18T18:51:19Z","body":"This bit me, because the way I read the example code was that \"DROPBOX_KEY\" was something sensitive.  But it was included in the example under `clientAllowedKeys`.  I made the incorrect assumption that `clientAllowedKeys` was necessary to expose .env contents via ember-cli-dotenv, but didn't realize it was actually propagating all the way into the client environment.  Eek!  After having to roll some passwords and keys that leaked, I figured I'd clarify for future users."}}