class

Flaw::PlaceholderValue

Inherits Flaw::Rule < Reference < Object

FLAW102 — placeholder secrets/URLs never replaced with real values. These typically survive vibe-coding sessions where the author forgot to wire up real config.

Constants

PATTERNS = [/"(your[_\- ]?(api[_\- ]?key|token|secret|password|email))"/i, /"(replace[_\- ]?me|change[_\- ]?me|fill[_\- ]?me[_\- ]?in|insert[_\- ]?here)"/i, /"<\s*(YOUR|INSERT|TODO|REPLACE)[\w\- ]*>"/i, /"(todo[_\-]?fill[_\-]?me|placeholder)"/i, /"(x{8,}|X{8,})"/, /"(changeme|default[_\-]?password|password123|admin123|secret123)"/i, /"(example\.com\/api|localhost:\d+\/REPLACE)"/i]

Instance methods

check(source : String, path : String) : Array(Finding)

Source

default_severity

Source

description

Source

tag

Category for grouping in flaw rules output and the README catalog. Override in rule subclasses. Default: "security".

Source

title

Source