Skip to content

Hard-coded API Keys in Source Code (Security Vulnerability) GSSOC-25 #51

@piyushkumar0707

Description

@piyushkumar0707

The application has hard-coded API keys exposed in the source code, specifically in utils/chatbot.py lines 6-7.
Why This Issue Matters:

  1. Security Risk: API keys are publicly visible in the repository
  2. API Abuse: Anyone can use these keys, potentially exhausting quotas
  3. Best Practices: Violates standard security practices for credential management
  4. Production Ready: The app can't be safely deployed with hard-coded keys

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions