# 敏感信息泄露：OAuth2 客户端密钥在管理员设置中暴露（未屏蔽）

**URL:** <https://meta.discourse.org/t/sensitive-information-disclosure-oauth2-client-secret-exposed-in-admin-settings-not-masked/373365>\
**Category:** Product Support\
**Tags:** oauth2\
**Created:** [2025 年7 月 8 日 12:05 UTC](https://meta.discourse.org/t/sensitive-information-disclosure-oauth2-client-secret-exposed-in-admin-settings-not-masked/373365 "2025-07-08T12:05:57Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

作者： ![Moin](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/moin/32/554653_2.png) [@Moin](https://meta.discourse.org/u/Moin)\
发布日期： [2025 年7 月 8 日 12:10 UTC](https://meta.discourse.org/t/sensitive-information-disclosure-oauth2-client-secret-exposed-in-admin-settings-not-masked/373365/2 "2025-07-08T12:10:28Z")

</div>

嘿 @Evie_Tao  
你正在报告很多安全问题。你有没有想过按照 GitHub 存储库中的说明，在 HackerOne 上报告它们？

> **[Build software better, together](https://github.com/discourse/discourse/security)**
>
> GitHub is where people build software. More than 150 million people use GitHub to discover, fork, and contribute to over 420 million projects.

---

_[View the full topic](https://meta.discourse.org/t/sensitive-information-disclosure-oauth2-client-secret-exposed-in-admin-settings-not-masked/373365)._