Slack webhooks: Validate webhook signatures and payload fields at the edge - #802

Open

obenland wants to merge 7 commits into

WordPress:trunkfrom

obenland:api/security-slack

Commits on Aug 13, 2026

Slack webhooks: Validate webhook signatures and payload fields at the edge.

obenland
and
claude
committed
e3cd197
Slack webhooks: Guard token comparisons against array input; use statement namespaces.

obenland
and
claude
committed
1184aa3
Slack webhooks: Use the two-argument dirname() form in the restructured requires.

obenland
and
claude
committed
9f700b7
Slack webhooks: Drop change-justification comments from the token guards.

obenland
and
claude
committed
49fed9d
Slack webhooks: Add file docblocks carrying the phpcs justifications.

obenland
and
claude
committed
6cff98e
Slack webhooks: Rename the Trac comment variable and harden filter fallbacks.

obenland
and
claude
committed
18ec071
Slack webhooks: Anchor validation regexes with \z.

obenland
and
claude
committed
4bd05a9