cloudflare / cloudflare/developer-platform

Workers silently accepts leading whitespace in secret variable names

Offen
#71 3 Kommentare 0 Reaktionen 1 zugewiesene Person Beansprucht von @dario-piotrowicz Auf GitHub ansehen
Vorherrschende Sprache
Keine Sprachdaten
Sterne
1
Forks
0
PR-Merge-Kennzahlen
Keine gemergten PRs in 30 T.

Beschreibung

### What versions & operating system are you using?

Wrangler 4.118.0
Node.js 24.14.1
npm 11.11.0
Linux Docker container
Windows host with PowerShell 7.6.4

The affected secret was originally created through the "Workers & Pages" dashboard under "Settings" → "Variables and Secrets".

### Please provide a link to a minimal reproduction

N/A

### Describe the Bug

The Workers dashboard accepts secret variable names with accidental leading or trailing spaces.

For example, ` FIREBASE_SERVICE_ACCOUNT_JSON` is deployed as a different binding from `FIREBASE_SERVICE_ACCOUNT_JSON`, without any warning.

This is difficult to notice and causes the expected `env` binding to be `undefined`.

Please trim surrounding whitespace ` ` automatically, or reject the name with a clear validation message before deployment.

### Please provide any relevant error logs

```bash
$ npx wrangler secret list

[
{
"name": " FIREBASE_SERVICE_ACCOUNT_JSON",
"type": "secret_text"
},
{
"name": "OTHER_AUTH_SECRET_WITHOUT_WHITESPACE",
"type": "secret_text"
}
]
```

Beitragsleitfaden

Beitragsleitfaden öffnen

Bewertung

Dieses Issue wurde noch nicht bewertet.

Neue Issues direkt in Ihr Postfach

Eine kurze Übersicht über anfängerfreundliche GitHub-Issues.