From b6a385dfb2bc1e565bb5c0f5ddf6cdc5796a95df Mon Sep 17 00:00:00 2001 From: Carl Littke Date: Fri, 27 Apr 2018 14:10:40 +0200 Subject: [PATCH 1/2] Stop logging value of METEOR_SETTINGS when it is not valid JSON. (#9843) In many production systems logs from the application will be forwarded to various logging systems, sometimes third party ones. All credentials in your settings will be leaked if you have any errors in your json. Feature request can be found here https://github.com/meteor/meteor-feature-requests/issues/293. --- packages/meteor/server_environment.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packages/meteor/server_environment.js b/packages/meteor/server_environment.js index 362e3595a9..5832fce170 100644 --- a/packages/meteor/server_environment.js +++ b/packages/meteor/server_environment.js @@ -21,7 +21,7 @@ if (process.env.METEOR_SETTINGS) { try { Meteor.settings = JSON.parse(process.env.METEOR_SETTINGS); } catch (e) { - throw new Error("METEOR_SETTINGS are not valid JSON: " + process.env.METEOR_SETTINGS); + throw new Error("METEOR_SETTINGS are not valid JSON."); } } From 61506c64e29e7c70352f46f9c8a6e423620a5b89 Mon Sep 17 00:00:00 2001 From: Ben Newman Date: Sat, 28 Apr 2018 10:10:47 -0400 Subject: [PATCH 2/2] Reinstate Deps as an alias for Tracker to fix #9830. --- packages/tracker/package.js | 1 + packages/tracker/tracker.js | 6 ++++++ 2 files changed, 7 insertions(+) diff --git a/packages/tracker/package.js b/packages/tracker/package.js index 90f29feec3..9475828977 100644 --- a/packages/tracker/package.js +++ b/packages/tracker/package.js @@ -7,6 +7,7 @@ Package.onUse(function (api) { api.use("ecmascript"); api.addFiles("tracker.js"); api.export("Tracker"); + api.export("Deps"); }); Package.onTest(function (api) { diff --git a/packages/tracker/tracker.js b/packages/tracker/tracker.js index 0b6e8078ad..cb39f51741 100644 --- a/packages/tracker/tracker.js +++ b/packages/tracker/tracker.js @@ -8,6 +8,12 @@ */ Tracker = {}; +/** + * @namespace Deps + * @deprecated + */ +Deps = Tracker; + // http://docs.meteor.com/#tracker_active /**