Skip to content

Mask URL variables from response headers

Bojan Marjanovic requested to merge bmarjanovic/webhook-encrypted-tokens-headers-masking into master

What does this MR do and why?

In some scenarios, the webhook endpoint may (unintentionally) return information that contains values that are supposed to be masked. This information will then show on the webhook logs page.

Screenshots or screen recordings

image

How to set up and validate locally

  1. Set up a webhook using https://webhook.site
  2. Mask the value after .site
  3. Test the webhook
  4. Validate that masked value is not a part of the Webhook Logs response headers

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Edited by Bojan Marjanovic

Merge request reports