Merge pull request #481 from ruhelamahi7-code/fix/firebase-env-graceful-error

fix: hide internal env variable names from public error message

Author: Nsanjayboruds

frontend/utils/Firebase.js

@@ -15,20 +15,22 @@ const missingFirebaseEnv = requiredFirebaseEnv.filter(
 );
 
 if (missingFirebaseEnv.length > 0) {
-  const message = `Configuration error: missing environment variables (${missingFirebaseEnv.join(
+  // Keep the detailed message out of the DOM to avoid exposing
+  // internal environment variable names to end users.
+  const devMessage = `Configuration error: missing environment variables (${missingFirebaseEnv.join(
     ', '
   )}). The site owner needs to add these in the hosting dashboard.`;
 
   // React hasn't mounted yet at this point, so we write directly to the DOM
   // to avoid leaving the user with a silent blank white screen.
   document.body.innerHTML = `
     <div style="font-family: sans-serif; max-width: 480px; margin: 80px auto; padding: 24px; text-align: center; color: #333;">
-      <h2 style="color:#c0392b;">Something's misconfigured</h2>
-      <p>${message}</p>
+      <h2 style="color:#c0392b;">We're currently unavailable</h2>
+      <p>This application is temporarily unavailable due to a configuration issue. Please try again later or contact support.</p>
     </div>
   `;
 
-  throw new Error(message);
+  throw new Error(devMessage);
 }
 
 const firebaseConfig = {