Azure / oav

Tools for validating OpenAPI (Swagger) files.
MIT License
95 stars 54 forks source link

Don't generate examples for `password` with a random string #1042

Closed scbedd closed 2 months ago

scbedd commented 2 months ago

Resolves #1041

Instead we are generating with the value <a-password-goes-here>.

This makes it obvious to users of the example, without breaking any workflows. I'll take care of adding this value to credscan necessary.

"SecretPlaceHolder" seemed almost arbitrary to me, and I figured I'd encode a bit more data in the value. If we just want to use that original string then I'll just do that.