[KongchangAI]
ConceptSecret Leakage

Secret Leakage

A security anti-pattern in which sensitive credentials such as API keys, cookies, and customer data are written into prompts or request bodies and thereby exposed through HTTP logs, including reverse proxies, CDNs, and debug logs.

Timeline (last 90 days)

Oct 13

Data should be desensitized before writing the prompt, real credentials should be placed in a local env file, and pushing should be refused when suspected key patterns are detected.

Unverified50%

All Facts (1)

Source Articles