February 2020 Summaries

The `target="_blank"` attribute in anchor tags creates a vulnerability that allows malicious scripts to access the parent page's location object, potentially redirecting users to phishing sites. This issue affects all major browsers and can be remedied by adding `rel="noopener"` to the anchor tag. Doppler has taken steps to address this vulnerability on their site and is raising awareness for their customers' protection. The company prioritizes security and will continue to work towards earning and maintaining users' trust.

Three months ago we stopped using ENV files as the default export option in the Doppler CLI, replacing them with JSON due to its stricter schema and strong native support in most languages. The switch has greatly reduced customer issues with parsing downloaded config files, and since the Doppler CLI creates a fallback of your secrets by default when running an application, we enabled encryption by default as well. This change has improved our customers' experience and provided a more secure way to manage secrets.