Your plugin keys are exposed

[dramirez]

If you use third party plugins, your API keys are exposed in the developer console.

[tylerboodman]

I would imagine this depends on the developer and how careful they are with exposing private keys? Is this a 3rd party Stripe plugin?

[dramirez]

The Stripe, Segment, and Mixpanel plugins are all from Bubble

[dorilama]

From Stripe’s docs about the publishable key

Can be publicly-accessible in your web or mobile app’s client-side code

[adamhholmes]

But those are all public keys, no?

[doug.burden]

Nothing to see here.