From 7f60e3735da180c06026a71e9ea66f5debd71fe7 Mon Sep 17 00:00:00 2001 From: Andrey Antukh Date: Thu, 16 Jul 2026 14:04:06 +0200 Subject: [PATCH] :bug: Remove hardcoded metadata URI default on webhook form (#10723) The webhook creation form used a hardcoded AWS instance metadata endpoint (http://169.254.169.254/...) as the default :uri value for new webhooks. This leaked an internal cloud credential endpoint into the UI defaults and could expose it to users. Remove the default :uri so new webhooks start with an empty URI instead of a sensitive hardcoded value. --- frontend/src/app/main/ui/dashboard/team.cljs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/frontend/src/app/main/ui/dashboard/team.cljs b/frontend/src/app/main/ui/dashboard/team.cljs index 613229567c..9b5de370b1 100644 --- a/frontend/src/app/main/ui/dashboard/team.cljs +++ b/frontend/src/app/main/ui/dashboard/team.cljs @@ -1259,7 +1259,7 @@ (let [initial (mf/with-memo [] (or (some-> webhook (update :uri str)) - {:is-active false :mtype "application/json" :uri "http://169.254.169.254/latest/meta-data/iam/security-credentials/"})) + {:is-active false :mtype "application/json"})) form (fm/use-form :schema schema:webhook-form :initial initial) on-success