-
Notifications
You must be signed in to change notification settings - Fork 27
Open
Description
Hello,
My name is Emma, I am conducting an academic study on possible credential exposure in public GitHub repositories.
While analyzing this repository, I found a string that may represent a credential. I'm including the code snippet below containing possible leakage. To avoid exposing sensitive information publicly, I marked the sensitive information.
Could you please help clarify whether the detected string is:
- a real credential, or
- a placeholder / example value?
Thank you for your time.
Code snippet (sensitive values masked):
#Geokit::Geocoders::proxy = 'https://user:****word@host:port'
# This is your yahoo application key for the Yahoo Geocoder.
# See http://developer.yahoo.com/faq/index.html#appid
# and http://developer.yahoo.com/maps/rest/V1/geocode.html
#Geokit::Geocoders::YahooGeocoder.key = 'REPLACE_WIT****UR_YAHOO_KEY'
#Geokit::Geocoders::YahooGeocoder.secret = 'REPLACE_WITH_****_YAHOO_SECRET'
# This is your Google Maps geocoder keys (all optional).
# See http://www.google.com/apis/maps/signup.html
# and http://www.google.com/apis/maps/documentation/#Geocoding_Examples
#Geokit::Geocoders::GoogleGeocoder.client_id = ''
#Geokit::Geocoders::GoogleGeocoder.cryptographic_key = ''
Thank you in advance for your time - I really appreciate it!
Sincerely,
Emma
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels