Skip to content

Add Webhook recursion detection

Luke Duncalfe requested to merge 329743-web_hooks-recursion-limit into master

What does this MR do and why?

Adds:

  • A limit to the total number of request calls in a single chain that can be initiated by webhooks.
  • A break if recursive webhook calls are detected.

The detection uses headers, which are passed through from the request to the webhooks that execute to track chains of webhook requests.

#329743 (closed)

How to set up and validate locally

Numbered steps to set up and validate the change are strongly suggested.

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Related to #329743 (closed)

Edited by Luke Duncalfe

Merge request reports