open/portfolio-optimiser
1
0
Fork 0
Code Issues Releases 1 Activity

feat(s52): webhook errors never leak the secret-bearing URL

Browse source
This commit is contained in:
Kjell Tore Guttormsen 2026-07-16 19:49:24 +02:00
commit c782c3402c
2 changed files with 36 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

7
src/portfolio_optimiser/notify.py
View file

@ -122,4 +122,9 @@ class WebhookNotifier:
self._post = post
def __call__(self, verdict: Verdict) -> None:
self._post(self._url, json.dumps(_verdict_payload(verdict), sort_keys=True))
try:
self._post(self._url, json.dumps(_verdict_payload(verdict), sort_keys=True))
except (URLError, OSError) as exc:
# STRICTER than ingest.py:314: the message NEVER carries the url — a Slack/Teams
# webhook URL embeds the receiver secret (the original cause stays chained).
raise NotifyError("webhook POST failed") from exc