Prevent Discord mention injection in delivery payload

2026-04-24 16:42:11 +00:00
parent 4908064f6d
commit 7f5f811066
2 changed files with 6 additions and 0 deletions
@@ -272,6 +272,9 @@ class DeliverNotificationAction implements ShouldQueue
            ->timeout(10)
            ->post($notificationAction->delivery_url, [
                'content' => $message,
+                'allowed_mentions' => [
+                    'parse' => [],
+                ],
            ]);
    }