Skip to content

Post Validation Hook Array (Breaking Change)

Compare
Choose a tag to compare
@Ratstail91 Ratstail91 released this 15 Jun 22:44
· 45 commits to main since this release

This is a security update.

I've replaced POST_VALIDATION_HOOK with POST_VALIDATION_HOOK_ARRAY , which can take a JSON array of hooks to send a GET message to. In addition, the resulting GET message now has a JWT authentication header, to guarantee where the message is coming from.

The old hook will stop working, and the new hook needs to be validated in your own code - so the security bug wasn't in this service, rather it was in the receiving code.

Sorry for the inconvenience.