fix(sec): pass Gemini API key in x-goog-api-key header instead of URL parameter (#169) - #178
Open
jihadMo wants to merge 1 commit into
Open
fix(sec): pass Gemini API key in x-goog-api-key header instead of URL parameter (#169)#178jihadMo wants to merge 1 commit into
jihadMo wants to merge 1 commit into
DevAsign-App / DevAsign · End goal
succeeded
Aug 7, 2026 in 0s
Acceptance criteria met
All acceptance criteria are met. Outbound Gemini API requests in summarizeVideo now transmit the API key using the x-goog-api-key HTTP header rather than embedding it as a URL query parameter, mitigating secret leakage risks in server and network logs. A regression unit test is included, with one warning recommendation on updating the config object directly in tests.
Loading