augustin-wien / augustina-backend

An open-source web shop designed for selling magazines on the street.
GNU Affero General Public License v3.0
4 stars 0 forks source link

Security feature for VivaWallet webhooks #146

Open lebe1 opened 9 months ago

lebe1 commented 9 months ago

Marshmallow.Unmarshal() function passes all bad requests without important parameters or even empty requests for example and does not raise any errors. Maybe we create a security feature by checking if the transactionID is in the request and other important values?