Skip to content

Conversation

@ericwb
Copy link
Contributor

@ericwb ericwb commented Mar 11, 2024

No description provided.

Signed-off-by: Eric Brown <ericwb@users.noreply.github.com>
host = "example.com"
conn = http.client.HTTPSConnection(host)
conn.request(
"GET", "/path?apiKey=value&otherParam=123", headers={"Host": host}

Check failure

Code scanning / Precaution

Use of HTTP Request Method With Sensitive Query Strings

Secrets in URLs are vulnerable to unauthorized access.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants