mirror of
https://github.com/penpot/penpot.git
synced 2026-07-21 13:37:49 +00:00
7f60e3735d
The webhook creation form used a hardcoded AWS instance metadata endpoint (http://169.254.169.254/...) as the default :uri value for new webhooks. This leaked an internal cloud credential endpoint into the UI defaults and could expose it to users. Remove the default :uri so new webhooks start with an empty URI instead of a sensitive hardcoded value.