logo

Database

Webflow Api Token

Description

The source code repository contains sensitive information: Webflow API Token

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    • Matches Webflow API Token patterns in source code and configuration files

Vulnerable code example

WEBFLOW_API_TOKEN=18debcb2b2eae25215b44a36b7576f22bc35740cc68bdea048b8e663b7a8177e
webflowApiKey: '753c6fa5e23c68851e24c278704dbfc58dc8f3a7db0e85fdfcdd29807762aee0'
curl --request GET \
  --url https://api.webflow.com/v2/sites \
  --header 'authorization: Bearer 4162cf5bd09c7bb3d0a6aa2099c98d3c82829f121b1638bfcf92a6bf3ef1881c'
const client = new WebflowClient({ accessToken: "18debcb2b2eae25215b44a36b7576f22bc35740cc68bdea048b8e663b7a8177e" });
client = Webflow(access_token="753c6fa5e23c68851e24c278704dbfc58dc8f3a7db0e85fdfcdd29807762aee0")
const webflow = new Webflow({ token: '4162cf5bd09c7bb3d0a6aa2099c98d3c82829f121b1638bfcf92a6bf3ef1881c' });...