search

ohld / django-telegram-bot

My sexy Django + python-telegram-bot + Celery + Redis + Postgres + Dokku + GitHub Actions template
https://t.me/ffmemesbot
Apache License 2.0
691 stars 170 forks source link

No hook sender verification #60

Open IgorDuino opened 10 months ago

IgorDuino commented 10 months ago

https://github.com/ohld/django-telegram-bot/blob/6e3e61751e4c1c2701cf954a5285260b7c9ee99d/dtb/views.py#L25-L39

Anyone can send a request and imitate any actions of users who started the bot

According to the documentation, such a check is enough