MetaCredo.Check.Security.HardcodedValue (MetaCredo v0.1.0)

View Source

Detects hardcoded URLs, IP addresses, and other sensitive values in string literals. Move these values to configuration files or environment variables.

This is a universal anti-pattern across all languages.

Category: Security / Priority: high

Configuration

Accepts the following parameters via .metacredo.exs:

  • exclude_localhost - Skip localhost/127.0.0.1 URLs (default: true) (default: true)
  • exclude_local_ips - Skip private IP ranges (default: true) (default: true)