Correct security and privacy knowledge guidance (#92)

* Correct security and privacy guidance

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 9c2eebc4-dcd5-4b85-8113-90772d818900

* Address security privacy review findings

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 9c2eebc4-dcd5-4b85-8113-90772d818900

---------

Co-authored-by: Jesper Schulz-Wedde <jesper.schulzwedde@microsoft.com>
This commit is contained in:
Jesper Schulz-Wedde 2026-07-14 11:25:03 +02:00 committed by GitHub
parent bfda67a95a
commit aca3986fd0
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
34 changed files with 192 additions and 153 deletions

View file

@ -1,23 +1,23 @@
codeunit 50210 "Sec Sample SecretHttp Bad"
{
procedure CallApiWithSecretInUri(ApiKey: SecretText)
procedure CallApiWithSecretInUri(ApiKey: Text)
var
HttpClient: HttpClient;
Response: HttpResponseMessage;
RequestUri: Text;
begin
RequestUri := 'https://api.example.com/data?key=' + ApiKey.Unwrap();
RequestUri := StrSubstNo('https://api.example.com/data?key=%1', ApiKey);
HttpClient.Get(RequestUri, Response);
end;
procedure CallApiWithBearer(BearerToken: SecretText)
procedure CallApiWithAccessToken(AccessToken: Text)
var
HttpClient: HttpClient;
Response: HttpResponseMessage;
Headers: HttpHeaders;
begin
Headers := HttpClient.DefaultRequestHeaders();
Headers.Add('Authorization', 'Bearer ' + BearerToken.Unwrap());
Headers.Add('Authorization', StrSubstNo('Token %1', AccessToken));
HttpClient.Get('https://api.example.com/data', Response);
end;
}