chore(security): gitleaks knows the public InnerTube key and a fixture's page cursors are no secrets

2026-10-25 17:35:20 +01:00
parent 4c2fbf9b8d
commit dc50b856fd
2 changed files with 9 additions and 1 deletions
@@ -20,7 +20,7 @@ _API_URL = "https://www.youtube.com/youtubei/v1/"
 _RESULTS_URL = "https://www.youtube.com/results"
 # Public WEB InnerTube key + a recent client version. These are also embedded in every results
 # page; we fetch the live pair once and cache it, falling back to these constants.
-_FALLBACK_KEY = "AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8"
+_FALLBACK_KEY = "AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8"  # gitleaks:allow -- the public WEB key, in every results page
 _FALLBACK_CLIENT_VERSION = "2.20240101.00.00"

 _HEADERS = {