mautrix / discord

A Matrix-Discord puppeting bridge
https://go.mau.fi/mautrix-discord
GNU Affero General Public License v3.0
240 stars 22 forks source link

Bot leaks webhook token on timeout #105

Closed mat-1 closed 1 year ago

mat-1 commented 1 year ago

Right now when Discord goes down and the bot tries sending a message through a relay webhook it shows an error that contains the full webhook URL. This is not ideal when it's a public server with many people (since it can be used to ping everyone, etc).

Here's how the error looks: 2023-07-14_03-37 (that webhook url isn't valid anymore)

I think ideally it should just censor the token, or alternatively it could just not show the URL at all.