github/penpot
1
0
Fork 0
mirror of https://github.com/penpot/penpot.git synced 2026-09-09 05:28:43 +00:00
Code Issues Packages Projects Releases Wiki Activity

🐛 Remove hardcoded metadata URI default on webhook form (#10723)

Browse Source 
The webhook creation form used a hardcoded AWS instance metadata
endpoint (http://169.254.169.254/...) as the default :uri value for
new webhooks. This leaked an internal cloud credential endpoint into
the UI defaults and could expose it to users.

Remove the default :uri so new webhooks start with an empty URI
instead of a sensitive hardcoded value.
This commit is contained in:
Andrey Antukh 2026-07-16 14:04:06 +02:00 committed by GitHub
parent ec4c5a75a7
commit 7f60e3735d
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
frontend/src/app/main/ui/dashboard/team.cljs
View File

@ -1259,7 +1259,7 @@
(let [initial (mf/with-memo [] (let [initial (mf/with-memo []
(or (some-> webhook (update :uri str)) (or (some-> webhook (update :uri str))
{:is-active false :mtype "application/json" :uri "http://169.254.169.254/latest/meta-data/iam/security-credentials/"})) {:is-active false :mtype "application/json"}))
form (fm/use-form :schema schema:webhook-form form (fm/use-form :schema schema:webhook-form
:initial initial) :initial initial)
on-success on-success