Your Slack Webhook urls are exposed to the world 😨

FYI: You should set up your Slack webhook like this. Tell your friends and families about it. Otherwise bad bad people will be able to message your Slack channels.


Why am I posting this? Because friends don’t let friends leak keys.
You can check if any keys are exposed here: https://bubbleio.wtf

4 Likes

Nice one Rico. More signposting in the Editor is required for Bubblers to understand this from the start.

Even a little wee message “URLs are public, use private URL parameters to hide confidential values” …. would help.

2 Likes

You r a good friend :ok_hand:

EDIT: Doesn’t Slack offers any authentication method? Never used :neutral_face:

It does offer that, but the webhook is the simplest solution.

1 Like

i saw in some other post suggesting that making the base url a private param and hide it from client-side