test: cover webhook signature validation

2026-07-19 12:46:19 +08:00
parent df8f62c75c
commit bc58981de2
3 changed files with 24 additions and 2 deletions
@@ -8,6 +8,10 @@

 - Hardened incoming RSS/Atom sources with public-HTTPS validation, redirect checks, response-size limits, and safe XML declaration rejection.

+### Fixed
+
+- Tightened standard webhook signature validation to reject invalid timestamps and non-v1 signature schemes.
+
 ## [0.7.0] - 2026-07-19

 ### Fixed