-
Notifications
You must be signed in to change notification settings - Fork 1
Open
Description
Hello,
My name is Emma, I am conducting an academic study on possible credential exposure in public GitHub repositories.
While analyzing this repository, I found a string that may represent a credential. I'm including the code snippet below containing possible leakage. To avoid exposing sensitive information publicly, I marked the sensitive information.
Could you please help clarify whether the detected string is:
- a real credential, or
- a placeholder / example value?
Thank you for your time.
Code snippet (sensitive values masked):
require 'launchy'
require 'oauth2'
require 'net/http'
require 'uri'
require 'json'
client_id = 'ENTER_CL****_ID_HERE'
client_secret = 'ENTER_CLIE****ECRET_HERE'
redirect_url = 'ENTER_REDIRECT_URL_****PECIFIED_IN_APP_HERE'
api_endpoint = 'https://api.projectplace.com'
authorize_url = '/oauth2/authorize' # Relative to api_endpoint
token_url = '/oauth2/access_token'
Thank you in advance for your time - I really appreciate it!
Sincerely,
Emma
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels