infrastructure/plunk
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #335 from schue30/fix/add-sns-webhook-eusc-partition-support

Browse Source
This commit is contained in:
Dries Augustyns
2026-03-29 17:38:38 +02:00
committed by GitHub
parent 4b290fd0b7 7b6540a748
commit 35c9e4c34e
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/api/src/controllers/Webhooks.ts
+2 -2
View File
@@ -53,8 +53,8 @@ export class Webhooks {
} }
// Only allow HTTPS requests to official AWS SNS endpoints. // Only allow HTTPS requests to official AWS SNS endpoints.
// The hostname must be exactly sns.<region>.amazonaws.com. // The hostname must be exactly sns.<region>.amazonaws.com or sns.<region>.amazonaws.eu
const SNS_HOST_RE = /^sns\.[a-z0-9-]+\.amazonaws\.com$/; const SNS_HOST_RE = /^sns\.[a-z0-9-]+\.amazonaws\.(com|eu)$/;
if (parsedURL.protocol !== 'https:' || !SNS_HOST_RE.test(parsedURL.hostname)) { if (parsedURL.protocol !== 'https:' || !SNS_HOST_RE.test(parsedURL.hostname)) {
signale.warn(`SNS SubscriptionConfirmation rejected — disallowed SubscribeURL host: ${parsedURL.hostname}`); signale.warn(`SNS SubscriptionConfirmation rejected — disallowed SubscribeURL host: ${parsedURL.hostname}`);
return res.status(400).json({success: false, message: 'Invalid SubscribeURL'}); return res.status(400).json({success: false, message: 'Invalid SubscribeURL'});