Reviewed webhook verification code and found critical vulnerability
First build tracked for this project
Discovered hardcoded webhook secret exposing credentials directly in source code.
Derived from this session's token and cost data. Not shown on the feed.
Comments