peptiderepo be9827ce13 fix(security): remove key-format prefix from API-key placeholder (#11) ...

PR Vision settings API-key input had placeholder="sk-or-…" which rendered the provider key-format prefix in admin HTML (tripping the not.toContain("sk-or-") smoke assertion). The real key value was never rendered (value="" write-only was correct). Placeholder is now neutral. Full-codebase audit: no other key-output path. v0.3.3.

QA: APPROVE (2026-06-19-e4c51ee).

Agent-Session: prv-key-leak-fix-20260619

2026-06-19 16:51:22 +07:00

2.9 KiB

Raw Blame History

View Raw