From 05ce3edb805a45c27c0009fa1ae4d2df7676d806 Mon Sep 17 00:00:00 2001 From: Ali BARIN Date: Wed, 30 Nov 2022 19:32:58 +0100 Subject: [PATCH] fix(webhook): respond with 404 for non-webhook flows --- packages/backend/src/controllers/webhooks/handler.ts | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/packages/backend/src/controllers/webhooks/handler.ts b/packages/backend/src/controllers/webhooks/handler.ts index f79839f6..17c15339 100644 --- a/packages/backend/src/controllers/webhooks/handler.ts +++ b/packages/backend/src/controllers/webhooks/handler.ts @@ -16,6 +16,12 @@ export default async (request: IRequest, response: Response) => { } const triggerStep = await flow.getTriggerStep(); + const triggerCommand = await triggerStep.getTriggerCommand(); + + if (triggerCommand.type !== 'webhook') { + return response.send(404); + } + const app = await triggerStep.getApp(); if (app.auth.verifyWebhook) {