Issue with process.env feature

[donaldkwong]

The process.env feature bypasses what's specified in allowlist and blocklist and isn't affected by the safe option. This represents a pretty big security risk. Can this feature be disabled?

[pke]

you can use strict and it wont be processed

[donaldkwong]

Thanks for the response! Can you elaborate on where to apply strict? I don't see that in the documentation.

[pke]

Sorry I meant "safe" mode: https://github.com/goatandsheep/react-native-dotenv#safe-mode
It will not process progress.env

[donaldkwong]

Unfortunately, 'safe' mode will still trigger process.env variable substitution.