Webhook secret was stored and shown as plaintext. Use a password field, encrypt at rest (with legacy plaintext read support), and look up tokens via findByWebhookToken so encrypted values still authenticate webhooks. |
||
|---|---|---|
| .. | ||
| Change.php | ||
| Create.php | ||
Webhook secret was stored and shown as plaintext. Use a password field, encrypt at rest (with legacy plaintext read support), and look up tokens via findByWebhookToken so encrypted values still authenticate webhooks. |
||
|---|---|---|
| .. | ||
| Change.php | ||
| Create.php | ||