Harden Discord delivery against mention injection #61

Merged
Twyco merged 1 commits from koda/pr59-improvements-discord-mentions into codex/v0.5-webhook-notification/05-discord-webhook-delivery 2026-04-24 16:50:08 +00:00
2 changed files with 6 additions and 0 deletions
@@ -272,6 +272,9 @@ class DeliverNotificationAction implements ShouldQueue
->timeout(10)
->post($notificationAction->delivery_url, [
'content' => $message,
'allowed_mentions' => [
'parse' => [],
],
]);
}
@@ -89,6 +89,9 @@ class DeliverNotificationActionTest extends TestCase
&& $request->hasHeader('Content-Type', 'application/json')
&& $request->data() === [
'content' => 'CORE-42 moved from Backlog to Doing by Erica Example: https://kanbangit.test/projects/core/tickets/42 ($unknown)',
'allowed_mentions' => [
'parse' => [],
],
];
});