feat: ✨ safe check for slack response url

AkashRajpurohit · Nov 8, 2024 · 5de8ab5 · 5de8ab5
1 parent 4821e87
commit 5de8ab5
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/index.ts b/src/index.ts
@@ -24,7 +24,7 @@ app.post('/slack/giffy', async (c) => {
     });
   }
 
-  if (!responseUrl) {
+  if (!responseUrl || !responseUrl.startsWith('https://hooks.slack.com')) {
     return c.json({
       response_type: 'ephemeral',
       text: "Sorry, slash commando, that didn't work. Please try again.",