Vadym/postiz-app
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

feat: secure /webhooks with IsSafeWebhookUrl
Some checks failed
Build Containers / build-containers-common (push) Has been cancelled
Details
Build / build (22.12.0) (push) Has been cancelled
Details
Build Containers / build-containers (amd64, ubuntu-latest) (push) Has been cancelled
Details
Build Containers / build-containers (arm64, ubuntu-24.04-arm) (push) Has been cancelled
Details
Build Containers / build-container-manifest (push) Has been cancelled
Details

Browse source
This commit is contained in:
Enno Gelhaus 2026-03-29 17:56:45 +02:00
parent 6f7a80f689
commit 5ae4c950db
No known key found for this signature in database
GPG key ID: F05E2EF8DBF7D874
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
libraries/nestjs-libraries/src/dtos/webhooks/webhooks.dto.ts
View file

@ -18,6 +18,10 @@ export class WebhooksDto {
@IsString()
@IsUrl()
@IsDefined()
@IsSafeWebhookUrl({
message:
'Webhook URL must be a public HTTPS URL and cannot point to internal network addresses',
})
url: string;
@Type(() => WebhooksIntegrationDto)