-
Notifications
You must be signed in to change notification settings - Fork 21
Security-related question about a possible exposed credential #1
Copy link
Copy link
Open
Description
Hello,
My name is Emma, I am conducting an academic study on possible credential exposure in public GitHub repositories.
While analyzing this repository, I found a string that may represent a credential. I'm including the code snippet below containing possible leakage. To avoid exposing sensitive information publicly, I marked the sensitive information.
Could you please help clarify whether the detected string is:
- a real credential, or
- a placeholder / example value?
Thank you for your time.
Code snippet (sensitive values masked):
// String dbUrl = "jdbc:mysql://127.0.0.1:330****avel?characterEncoding=gbk";
// String dbUrl = "jdbc:mysql://192.****233.21:3306/travel";
String dbUrl = "jdbc:mysql://127.0.0.1:3306/t****ldata?characterEncoding=utf-8";
String dbUser = "1****";
String dbPwd = "1****";
conn = DriverManager.getConnection(dbUrl, dbUser, dbPwd);
} catch (Exception e) {
System.err.println("数据库连接失败");
e.printStackTrace();
}
return conn;
Thank you in advance for your time - I really appreciate it!
Sincerely,
Emma
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels