Merge pull request #247 from xiaolai/fix/nlpm-zapier-webhook-url-validation

fix: validate https:// scheme for hooks send webhook URL in zapier.js
2026-04-21 12:01:13 -07:00
parent dffa2fd3cb db34fa2a21
commit 880386085e
1 changed files with 2 additions and 0 deletions
@@ -122,7 +122,9 @@ async function main() {
    case 'hooks':
      switch (sub) {
        case 'send': {
+          // Sends a POST to a Zapier webhook catch hook URL (e.g. https://hooks.zapier.com/hooks/catch/...)
          if (!args.url) { result = { error: '--url required' }; break }
+          if (!args.url.startsWith('https://')) { result = { error: '--url must use https://' }; break }
          if (!args.data) { result = { error: '--data required (JSON string)' }; break }
          let data
          try {