How to Hide ENV in Kirby

The CMS Questions
1

Hi, I’m using the Kirby ENV Plugin, but people can read the variables because I wrote this code in a script.

<script>
  const userInfo = {
 
      authEmail: "<?= $page->env("USEREMAIL") ?>",
      authPassword: "<?= $page->env("USERPASSWORD") ?>"
  }

st errorMessageList = {
    passwordConfirmation: "<?= $page->passwordconfirmation() ?>",
    notFoundEmail: "<?= $page->notexistemail() ?>",
    existEmail: "<?= $page->existemail() ?>",
    wrongAnswer: "<?= $page->wronganswer() ?>",
    globalError: "<?= $page->globalerror() ?>",
    fullcapacity: "<?= $page->fullcapacity() ?>",
    wrongkey: "<?= $page->wrongkey() ?>",
    signupservice: "<?= $page->signupservice() ?>",
  }

</script>
2

And this is my kirby config.php

<?php

header('Access-Control-Allow-Origin: *'); // Allow all origins for simplicity; adjust as needed
header('Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS');
header('Access-Control-Allow-Headers: Content-Type, Authorization');
/**
 * The config file is optional. It accepts a return array with config options
 * Note: Never include more than one return statement, all options go within this single return array
 * In this example, we set debugging to true, so that errors are displayed onscreen. 
 * This setting must be set to false in production.
 * All config options: https://getkirby.com/docs/reference/system/options
 */
return [
    
    'sylvainjule.backups.prefix' => 'backup-',
    'sylvainjule.backups.publicFolder' => 'my-secretly-public-backups',
    'sylvainjule.backups.maximum' => 2,
    'debug' => false,
    'api' => [
        'basicAuth' => true,
        'allowInsecure' => true, //for http
    ],
    'panel' =>[
        'install' => true
    ],
    'kql' => [
        
    ],
    
    
];
3

I am not quite sure I understand what you expect Kirby to do here?

Javascript in a script tag will always be visible to the user. So no matter where or how you store your secrets, if you add them to your script tag, they will be visible to the user. That’s not really something Kirby controls, but you as developer.

4

Thank you! I have solved the problem👍