VB009
Hardcoded credential
Visual Basic 6
Error
Security
A secret in source ships to every developer machine and every backup; in VB6, = is both assignment and comparison, and either way the literal is the leak
a secret in source ships to every developer machine and every backup; in VB6, = is both assignment and comparison, and either way the literal is the leak.
Why this severity
a secret in source ships to every developer machine and every backup; in VB6, = is both assignment and comparison, and either way the literal is the leak.
Known false positives
placeholder values in samples and tests.
Remediation example
password = GetSetting("MyApp", "Auth", "Password")
' and rotate the value that was committed