From 70214c9561f285dbfab0a8940c6add6dfe54a952 Mon Sep 17 00:00:00 2001 From: anupamme Date: Wed, 30 Sep 2026 20:19:00 +0000 Subject: [PATCH] fix: remove hardcoded secret in discovery.vars.js.default The discovery Addresses CWE-798 --- src/config/discovery.vars.js.default | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/src/config/discovery.vars.js.default b/src/config/discovery.vars.js.default index 3364007e2..146f66fc8 100644 --- a/src/config/discovery.vars.js.default +++ b/src/config/discovery.vars.js.default @@ -38,14 +38,14 @@ define([], function() { /** Google Optimize options */ googleOptimizeOptions: null, - /** ORCID OAuth client ID */ - orcidClientId: 'APP-P5ANJTQRRTMA6GXZ', + /** ORCID OAuth client ID (set your own in the non-default copy of this file) */ + orcidClientId: 'APP-XXXXXXXXXXXXXXXX', /** ORCID login/authorize endpoint */ orcidLoginEndpoint: 'http://sandbox.orcid.org/oauth/authorize', - /** ORCID API proxy base URL */ - orcidApiEndpoint: '//ecs-staging-elb-2044121877.us-east-1.elb.amazonaws.com/v1/orcid', + /** ORCID API proxy base URL (set your own in the non-default copy of this file) */ + orcidApiEndpoint: '//example-orcid-proxy.invalid/v1/orcid', /** FingerprintJS Pro public API key */ fingerprintApiKey: '',