DeepFrontend
Learning Paths
Practice
System Design & DS
Design Studio
Data Structures Curriculum
Real-World Case Studies
Careers
Job Board
Resume Builder
Blog
Sign in
Search
⌘K
Go Pro
Loading compiler resources...
Web Security Quiz Practice
Active Recall Drill Session
← Exit Session
Question 1 of 1
hard
Web Security
In the Implement It Yourself secret scanner, why does it specifically check for NEXT_PUBLIC_-prefixed secret-shaped variable names, beyond generic key-pattern matching?
A
It doesn't check for this at all
B
Because a secret given that prefix has a DISTINCT, framework-specific failure mode — it gets shipped to every browser, not just hardcoded in server-side source — which a generic secret scanner might not think to flag
C
NEXT_PUBLIC_ variables are always safe and never need scanning
D
This check is redundant with the AWS key check
Check Answer