[🔴 MAJOR VULNERABILITY 🔴] Scratch session ID isn't in a secret

[jayz3314]

The scratch session id is not in a secret, which means anybody can access it and use it for bad things.

^{NECESSARY MENTION: @ScratchCredit/developers}

[yoyomonem]

Now this is where there's a problem.

The thing is, I have no idea how to store something in a secret.

[yoyomonem]

I noticed that you closed this issue as not planned. When it's planned that my Scratch session ID will be put in a secret, I'll reopen this issue, and when I'm finished, I'll close it again as finished.

[yoyomonem]

I noticed you reopened this issue. This is not planned yet, so I will temporarily close this as not planned.

Thanks!