Glossary: Physical and Wireless Vectors, and Vulnerabilities
Hardcoded secret
Also written: hardcoded secrets, hardcoded credentials
A password, key or token written straight into source code, like DB_PASSWORD in shop_db.py. Everyone with the code, and its history, has the secret, so the first fix is to rotate it.
Where the book teaches it
Related terms
SecretSecrets managerRotatedetect-secretsEnvironment variable