Deploy react project to Heroku without source code showing?

Question

I have a react project I am trying to deploy to heroku. I did so by installing the react buildpack however when I go to the website, open inspect element, all my client side source code is simply exposed to all public view. What am I doing wrong, I cannot find any help which addresses this issue but it is quite the security flaw. Help me understand, because I know I did something wrong and it should not be this way. Thanks!

Adarsh · Accepted Answer · 2022-08-30 21:51:52Z

1

Change the build script to include GENERATE_SOURCEMAP=false so that the build commands follow it. This is an intended effect according to this

gaearon

This is expected. You can delete .map files from the build output if you want to disable it, although you'll get console warnings about them missing.

There is no harm in leaving them in though in my opinion. Client code is already available to the user’s machine so there’s no secrets in it.

scripts: {
  "build": "GENERATE_SOURCEMAP=false react-scripts build"
}

answered Aug 30, 2022 at 21:51

Adarsh

4485 silver badges16 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Deploy react project to Heroku without source code showing?

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related