This is a security issue. Other bits of secret data from contributed modules might be exposed as well.

Comments

lklimek’s picture

lklimek commented

Thanks :)

Re-designed the module. Now developers must explicitly define that a variable should be exported to JavaScript. It can be done by defining flag 'js' equal to 'true' in hook_variable_info().

lklimek’s picture

lklimek commented
Status: Active » Fixed

Automatically closed -- issue fixed for 2 weeks with no activity.