Skip to content

Code monitors: restrict slack webhooks to only https and slack host

Administrator requested to merge cc/secure-webhooks into main

Created by: camdencheek

Previously, there was no backend validation that slack webhooks for code monitors actually pointed to Slack's API. This adds a check on code monitor creation.

cc @andreeleuterio @deflncha @limitedmage

Test plan

Added test that creation fails with invalid URL as well as unit test for valid/invalid urls.

Merge request reports