API key in the file image/FlickrBadge.js

[blueSwordfish]

Hello,

We have dojox included in our project. (Thanks! )
A recent security scan of our project shows that the API key is saved in this file: image/FlickrBadge.js.
https://github.com/dojo/dojox/blob/master/image/FlickrBadge.js
Not sure it is still used or valid. Just want to let you know. Thanks!

[blueSwordfish]

Does anyone know if the API key is still valid and in use? We are forced by our organization to remove any API key in our code.
If it is not valid or used, we can just dismiss the issue. Otherwise we will have to remove it every time after we pull the code.
Thanks a lot!

[phiggins42]

I'd wager it is no longer valid, Shane or I did this a decade or more ago. One proactive approach would be to just make a PR with `[insert flickr api key here]` as the key.

…

On Wed, Mar 6, 2024 at 12:12 PM Lihui Hu ***@***.***> wrote: Does anyone know if the API key is still valid and in use? We are forced by our organization to remove any API key in our code. If it is not valid or used, we can just dismiss the issue. Otherwise we will have to remove it every time after we pull the code. Thanks a lot! — Reply to this email directly, view it on GitHub <#330 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAAOIGPDVH2GGRSKA6ZX73TYW5E6DAVCNFSM6AAAAABDMLFUJCVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTSOBRGM3TSNRTGU> . You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>

[blueSwordfish]

Thank you so much, Peter!
I created a PR and signed the CLA document.
Could someone review it? Thanks!