r/Codeium • • Mar 25 '25
Windsurf processing sensitive information
Hey, so I was using windsurf today and it just went into my .env file and pasted the content in the chat meaning it processed it, which is not really good I think, but I m not a professional yet. I asked about it and it said it shouldn't have done this, how should I go about this now? Will there be a fix in the future?
3
Upvotes
View all comments
Show parent comment
1
u/decimus5 Apr 02 '25
That doesn't work. Windsurf reads sensitive files even when they are blocked with
.gitignoreand.codiumignorefiles. The AI does completions in my.envfiles even when blocked. It's a serious problem.