bcquality/microsoft/knowledge/security/use-isolated-storage-for-module-and-company-secrets.bad.al

codeunit 50209 "Sec Sample IsolatedStorage Bad"
{
    procedure StoreApiKey(NewKey: Text)
    begin
        // Plaintext write to IsolatedStorage is not encrypted at rest.
        IsolatedStorage.Set('ApiKey', NewKey, DataScope::Module);
    end;

    procedure GetApiKey(): Text
    var
        ApiKey: Text;
    begin
        // Public wrapper: another extension can call this to read the secret.
        if IsolatedStorage.Get('ApiKey', DataScope::Module, ApiKey) then
            exit(ApiKey);
        exit('');
    end;
}