Code vulnerabilities · Question 8 of 12
What is problematic about an API key written directly in the source code?
1 answer is correct. Easy
Show answer
Answer
- C Anyone with access to the code knows the key
Explanation
Hardcoded secrets end up in repositories, backups and builds. If the code leaks, the key is compromised. Secrets belong in a secrets manager or in environment variables.