20:59
2026-08-28
dev.to
developer-tools
Your NEXT_PUBLIC secret is already in the browser bundle
A developer has highlighted a critical security flaw in Next.js applications where developers inadvertently expose server-side secrets by prefixing environment variables with NEXT_PUBLIC_. The tool Ke…