Hey there! I stumbled on your Telegram bots - very cool! I just wanted to let you know that you may accidentally be leaking your TELEGRAM_WEBHOOK_SECRET by returning it when users don't include it as a header
Good catch thanks! I put it there for debug and forgot to remove
happy to help! you may want to revoke it to be safe, and also fix it in these two:
Hey there! I stumbled on your Telegram bots - very cool! I just wanted to let you know that you may accidentally be leaking your TELEGRAM_WEBHOOK_SECRET by returning it when users don't include it as a header
Good catch thanks! I put it there for debug and forgot to remove
happy to help! you may want to revoke it to be safe, and also fix it in these two: