Environment Variables Exposed

[Krishil-Jayswal]

You have forgot to remove the .env while pushing code to github (in Day 97/ChatApp). And also the mongoDb url is still accessible. So you should remove the .env file from the repository or remove the credentials from it.

[ArunSunhare]

Remove .env from the Git History
Since the file has already been pushed, you need to purge it from your commit history. Warning: This process rewrites history. If you're working in a team or if the repository is public, coordinate with everyone because this requires a force push.

Option A: Using git filter-branch
Run the following command to remove all history of the .env file:

git filter-branch --force --index-filter
'git rm --cached --ignore-unmatch .env'
--prune-empty --tag-name-filter cat -- --all