Sensitive information disclosure: OAuth2 client secret exposed in admin settings (not masked)

Product Support
2

Hey @Evie_Tao
You are reporting lots of security concerns. Have you thought about reporting them on HackerOne, as it’s explained in the GitHub repository?

Overview · discourse/discourse · GitHub