title: Is it safe to use my Flickr API key in client-side JavaScript?
body: <p>I want to use the Flickr API method <strong>flickr.photos.search</strong> in JavaScript, to search for all my photos with a specific tag:</p>
  
  <pre><code>http://api.flickr.com/services/rest/?method=flickr.photos.search&amp;api_key={API_KEY}&amp;user_id=50001188%40N00&amp;tags=fazynet&amp;format=rest
  </code></pre>
  
  <p>(To make it work, change <code>{API_KEY}</code> to a valid Flickr API key.)</p>
  
  <p>My question is: <strong>Is it safe to include that key in client-side JavaScript?</strong></p>
  
  <p>I've seen some tutorial sites doing it, but what's to stop someone copying their API key (or mine) and going over the rate limits?</p>
  
  <p>Of course, I could set up a very simple proxy running in Node.js that inserts the key (probably even Apache or Nginx could do it), but it's one more thing to set up and monitor.</p>
  
  <p>If there's a safe, pure JavaScript solution, I'll take that please. :)</p>
  
  <p>Note, I am currently using this query which requires no authentication:</p>
  
  <pre><code>http://api.flickr.com/services/feeds/photos_public.gne?id=50001188@N00&amp;tags=fazynet&amp;format=json
  </code></pre>
  
  <p>However, the results appear to be no longer reflecting changes (after at least a 24-hour wait).</p>