EnriquePerezH / EnriquePerezH/testIntegrations
Leaked Secret in Server/doc/secrets/detectors/basicauth.adoc
- Dominant language
- No language data
- Stars
- 0
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Description
Type: **basic_auth_url**
The issue was introduced on 2023-02-02T10:17:59.000+00:00 in:
- the component: ****
- the specific location: **Server/doc/secrets/detectors/basicauth.adoc**
Network resources often are specified by URL. Many protocols requiring basic (password) authentication allow encoding the credentials (username and password) in the URL.For example, the following URL `https://user:pass@host:port/path` encodes basic authentication credentials. The client using this URL will send an HTTP message with basic authentication header. Such `user:pass` pair represent an obvious hardcoded secret.See [RFC 3986](https://datatracker.ietf.org/doc/html/rfc3986) (URI generic syntax), section 3.2.
Follow these http://docs.xygeni.io/secrets/detectors/basicauth.html(URL_to_docs)
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.