API Token and Sensitive Data Exposure

[puzzlepeaches]

The BChecks included in this pull detect API keys and common forms of sensitive data exposure in the form of webhooks, JWTs, etc.

I have not been able to test all of these at scale and have set their confidence to tentative to ensure testers review discoveries manually to prevent false positives.

Please let me know if any changes need to be made before merging.

[JaveleyQAQ]

cool. look this https://jaimepolop.github.io/RExpository/ @puzzlepeaches

[BuffaloWill]

👍 upvote