Postman is logging all your secrets and environment variables

https://anonymousdata.medium.com/postman-is-logging-all-your-secrets-and-environment-variables-9c316e92d424

50 9 1 year ago

anonymousdata.medium.com

I wrote up my findings on this late last night, so I would greatly appreciate anyone who might be able to give me an independent sanity check that this is actually what's happening.

pjmlp• 1 year ago

There is a reason why it is now a forbidden tool in many corporations.

az09mugen2• 1 year ago

I don't get why people still use postman when you have nice open-source tools such as Bruno [0], which actually can do a lot of what postman does, and more than that you can even import your postman collections.

[0] https://github.com/usebruno/bruno

primitivesuave3• 1 year ago

Thank you so much for sharing this. We're actively looking for alternatives to Postman right now, and would be heavily inclined toward an OSS solution.

az09mugen2• 1 year ago

You're welcome, and thanks a lot for sharing this article.

lostmsu• 1 year ago

I am using Insomnia: https://github.com/Kong/insomnia

noisy_boy• 1 year ago

I really tried to use Bruno but I lost all my work because of a bug in it - I don't think it is ready for trusting my day-to-day work to it.

Postman is logging all your secrets and environment variables

Related Stories