Ddos 
Yesterday, Apple unveiled its redesigned Apple App Store web version, marking a significant overhaul from the previous iteration. The most notable improvement lies in the addition of a homepage and search functionality, allowing users to discover a wider range of apps and games directly through their browsers.
However, it appears that Apple’s engineers inadvertently failed to disable the SourceMap feature in the production environment at launch—an oversight that allowed anyone to download the complete front-end codebase of the web version directly from the live site.
Developer @rxliuli stated that, for educational purposes, the source code has been archived on GitHub for public study and reference. The repository includes the full Svelte/TypeScript source code, state management logic, UI components, API integration code, and routing configuration.
Although this incident constitutes a data exposure, it poses no significant security or privacy risk, as the leaked materials contain no sensitive credentials or keys. Nevertheless, it remains a serious procedural lapse, since disabling SourceMap in production is a fundamental best practice for any development team.
Developers interested in examining the source can access it here.
Related Posts:
- Elon Musk’s xAI Sues Ex-Engineer Over Stolen Grok AI Secrets
- WSL Goes Open Source: Microsoft Opens Up Windows Subsystem for Linux
- Microsoft AI researchers accidentally leaked up to 38TB of data: including secrets, private keys, passwords
Donate