Use SecretText type to protect credentials and sensitive textual values from being revealed

[Arthurvdv]

This new rule can start with the use case of passing values to the 'Authorization' property of the HttpHeaders.

procedure MyProcedure()
var
    RestClient: Codeunit "Rest Client";
    Headers: HttpHeaders;
    UnprotectedCredential: Text;
    Credential: SecretText;
    AuthTok: Label 'Authorization', Locked = true;
begin
    // In these cases raise a rule
    Headers.Add('Authorization', UnprotectedCredential);
    Headers.Add(AuthTok, UnprotectedCredential);
    Headers.Add('Authorization', StrSubstNo('Bearer %1', UnprotectedCredential));
    Headers.Add(AuthTok, StrSubstNo('Bearer %1', UnprotectedCredential));

    RestClient.SetDefaultRequestHeader('Authorization', UnprotectedCredential);
    RestClient.SetDefaultRequestHeader(AuthTok, UnprotectedCredential);
    RestClient.SetDefaultRequestHeader('Authorization', StrSubstNo('Bearer %1', UnprotectedCredential));
    RestClient.SetDefaultRequestHeader(AuthTok, StrSubstNo('Bearer %1', UnprotectedCredential));

    // Do not show a rule
    Headers.Add('Authorization', Credential);
    Headers.Add(AuthTok, Credential);
    Headers.Add('Authorization', SecretText.SecretStrSubstNo('Bearer %1', Credential));
    Headers.Add(AuthTok, SecretText.SecretStrSubstNo('Bearer %1', Credential));

    RestClient.SetAuthorizationHeader(Credential);
    RestClient.SetDefaultRequestHeader('Authorization', Credential);
    RestClient.SetDefaultRequestHeader(AuthTok, Credential);
    RestClient.SetDefaultRequestHeader('Authorization', SecretText.SecretStrSubstNo('Bearer %1', Credential));
    RestClient.SetDefaultRequestHeader(AuthTok, SecretText.SecretStrSubstNo('Bearer %1', Credential));
end;

In the future this rule could expand to more use cases. If you have more ideas or use cases, please add an comment here.