Remove API keys automatically
Over the last few days, I have had multiple questions that have included their API keys in their code.
Perfect example:
Just today I edited a post that had payment authentication keys...
Obviously most people aren't going to do anything bad with them, but since they are available to anyone on the world wide web, I think they should be removed.
How to do it?
I have seen other websites that convert serial numbers, usernames, keys, ect... into XXXXXX
.
My questions:
- Should this be done?
- How would you tell API keys apart from other code or hashes?
- Should SO maybe give a warning when users are asking a question?
Following questions suggested as related in comments are not covering topic in this feature request: