dunkirk.sh / thistle
🪻 distributed transcription service thistle.dunkirk.sh
fork atom

fix: webhook signature validation error responses #7

closed
opened by dunkirk.sh edited

Medium Priority#

Location: src/index.ts:1355

Issue#

Webhook validation throws generic 400 on error, exposing validation logic

Impact#

Information leakage to attackers

Fix Time#

~10 minutes

Recommendation#

Return consistent 400 responses regardless of validation outcome

From LAUNCH_REVIEW.md Issue #17

sign up or login to add to the discussion
Labels

None yet.

priority
medium
assignee
dunkirk.sh
Participants 1
AT URI
at://did:plc:krxbvxvis5skq7jj6eot23ul/sh.tangled.repo.issue/3m6d4dmysmp2s