I don't know why anyone would paste or type secrets into codepen which is public by default... But it always seemed like it auto-saved / sent your code over to the back-end, going back ten years roughly?
Copy -> paste -> redact secrets
That flow would be considered unsafe, and probably common.
Copy -> paste -> redact secrets
That flow would be considered unsafe, and probably common.