From 6cbe355866554e0bff9eb042305b6731f0e8b4b0 Mon Sep 17 00:00:00 2001 From: Nils Strelow <1096841+nstrelow@users.noreply.github.com> Date: Fri, 9 Oct 2020 20:41:00 +0200 Subject: [PATCH 1/2] Add disclaimer to not use Masterkey on client side --- packages/flutter/README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/packages/flutter/README.md b/packages/flutter/README.md index 964e89ce4..5ee3de12e 100644 --- a/packages/flutter/README.md +++ b/packages/flutter/README.md @@ -52,6 +52,7 @@ It's possible to add other parameters to work with your instance of Parse Server coreStore: await CoreStoreSharedPrefsImp.getInstance()); // Local data storage method. Will use SharedPreferences instead of Sembast as an internal DB ``` +⚠️ Please note that the master key should only be used in safe environments and never on client side ‼️ #### Web support Due to Cross-origin resource sharing (CORS) restrictions, this requires adding `X-Parse-Installation-Id` as an allowed header to parse-server. From cb40a6fd82cf6a46deabe3949dd5294d722763cd Mon Sep 17 00:00:00 2001 From: Nils Strelow <1096841+nstrelow@users.noreply.github.com> Date: Fri, 9 Oct 2020 20:44:16 +0200 Subject: [PATCH 2/2] Add disclaimer to not use Masterkey on client side --- packages/dart/README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packages/dart/README.md b/packages/dart/README.md index e79a8f4cb..b57447dbc 100644 --- a/packages/dart/README.md +++ b/packages/dart/README.md @@ -57,7 +57,7 @@ It's possible to add other parameters to work with your instance of Parse Server securityContext: securityContext, // Again, required for some setups coreStore: CoreStoreMemoryImp()); // Non persistent mode (default): Sdk will store everything in memmore instead of using Sembast as an internal DB. ``` - +⚠️ Please note that the master key should only be used in safe environments and never on client side ‼️ Using this package on a server should be fine. #### Early Web support Currently this requires adding `X-Parse-Installation-Id` as an allowed header to parse-server.