fix(WooCommerce): always expect signature in webhook requests (#28367)
(cherry picked from commit 24b048925b)
Co-authored-by: Sagar Vora <sagar@resilient.tech>
This commit is contained in:
@@ -22,8 +22,7 @@ def verify_request():
|
||||
)
|
||||
|
||||
if frappe.request.data and \
|
||||
frappe.get_request_header("X-Wc-Webhook-Signature") and \
|
||||
not sig == bytes(frappe.get_request_header("X-Wc-Webhook-Signature").encode()):
|
||||
not sig == frappe.get_request_header("X-Wc-Webhook-Signature", "").encode():
|
||||
frappe.throw(_("Unverified Webhook Data"))
|
||||
frappe.set_user(woocommerce_settings.creation_user)
|
||||
|
||||
|
||||
Reference in New Issue
Block a user