From af45f00d76e2b96acb2b866be266064490d8f03b Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Mar=C3=ADa=20A=2E=20Matienzo?= Date: Tue, 16 Sep 2025 15:10:16 -0700 Subject: [PATCH] AP-449: avoid leaking env variables into build @yzhoubk reported in Slack that snapshot builds were failing again as in AP-403. upon further investigation, i discovered that vite was dumping our entire environment into the build, which could lead to credential leakage. this scopes to the only environment variable that's needed by vue's reactivity-related internals. --- vite.config.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/vite.config.js b/vite.config.js index 24187ba..94f4b0d 100644 --- a/vite.config.js +++ b/vite.config.js @@ -44,6 +44,6 @@ export default defineConfig({ }, plugins: [vue(), stripDevCSS()], define: { - 'process.env': process.env + 'process.env.NODE_ENV': `"${process.env.NODE_ENV}"` } })