logo

Database

Google Oauth2 Secret Key

Description

The source code repository contains sensitive information: Google OAuth2 Secret Key

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    Matches Google OAuth2 Secret Key patterns in source code and configuration files

Vulnerable code example

GOOGLE_CLIENT_SECRET=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
client_secret: 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
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