DeepFrontend
Learning Paths
Practice
System Design & DS
Design Studio
Data Structures Curriculum
Real-World Case Studies
Careers
Job Board
Resume Builder
Blog
Sign in
Search
⌘K
Go Pro
Loading compiler resources...
Web Security Quiz Practice
Active Recall Drill Session
← Exit Session
Question 1 of 1
medium
Web Security
A code review finds a Stripe secret key hardcoded directly in a client component file, assigned to a variable named NEXT_PUBLIC_STRIPE_SECRET. What are the TWO distinct problems here?
A
There's only one problem: hardcoding
B
Hardcoding a secret directly in source (should be an env var, never committed) AND giving it the NEXT_PUBLIC_ prefix, which makes it permanently shipped to every browser regardless of the hardcoding issue
C
Neither is actually a real problem
D
The only issue is the variable naming style
Check Answer