Skip to content

Network overload possible? Out of memory possible? #9

Open

Description

@Osiris-Team

Since webhook events are verified by sending them completely to the payment processor and then waiting for the result, a malicious user could create fake webhook events that are very very large, thus decreasing overall network speed.

If the webhook event is large enough it could even cause the app to go out of memory, because the event is parsed fully.

It seems that payment processors also don't really have a maximum allowed size for the webhook event before they close the connection.

Activity

  1. changed the title [-]Network overload possible?[/-] [+]Network overload possible? Out of memory possible?[/+] on Nov 1, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions