Secure Cart

[chrisvdm]

Cart works but needs to be managed on the backend to avoid security risks

[chrisvdm]

@jtoar dunno if writing to a temp file would work?

[adriatic]

As I tried to explain in my yesterday's article Redwood-Stripe integration - currently unresolved issues, Stripe components have the strongest security already implemented, meaning the cart (a Stripe component) is most secure part of the Sample Store app.

Our sample store app, needs to be secure as well - as described in https://redwoodjs.com/docs/security document. As redwood security recommendation strongly suggest using the Doppler service instead of environment variables I will rework the current use of .env into the Doppler environment.