# Stripe Webhook in Bubble - big vulnerability to all apps that use them **URL:** \ **Category:** APIs\ **Created:** [February 2, 2021, 4:42pm UTC](https://forum.bubble.io/t/stripe-webhook-in-bubble-big-vulnerability-to-all-apps-that-use-them/134030 "2021-02-02T16:42:43Z")\ **Posts on this page:** 1\ **Showing post:** 27
**Author:** ![sudsy](https://sea1.discourse-cdn.com/bubble/user_avatar/forum.bubble.io/sudsy/32/114637_2.png) [@sudsy](https://forum.bubble.io/u/sudsy)\ **Post date:** [February 27, 2021, 3:12pm UTC](https://forum.bubble.io/t/stripe-webhook-in-bubble-big-vulnerability-to-all-apps-that-use-them/134030/27 "2021-02-27T15:12:40Z")
Thanks for the reply, @Jici.     > [@Jici](#): > > It’s absolutely possible But HOW? I tried a couple approaches but couldn’t come up with a way to access the raw payload (request body).     > [@Jici](#): > > not different for Bubble than any other tools that receive a webhook from Stripe The issue is not implementing the verification code, but rather how to get access to the raw payload - i.e. how to get the raw request data from a Bubble endpoint workflow into the context of a plugin. Or are you saying there’s a way for a plugin itself to function as an endpoint? Maybe there’s something I’m missing. It almost seems like something that Bubble would have to implement as an internal plugin; and if they did, I would recommend it be a separate plugin that implements an action. That way, it could be used with any Stripe plug-in.     > [@Jici](#): > > may already be possible using existing plugin Not that I can see. --- _[View the full topic](https://forum.bubble.io/t/stripe-webhook-in-bubble-big-vulnerability-to-all-apps-that-use-them/134030)._