fix(secret): secret hash expose (#23)

sxzz · Jun 27, 2024 · 0106974 · 0106974
1 parent a528200
commit 0106974
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/routes/telegram-hook.ts b/routes/telegram-hook.ts
@@ -12,7 +12,13 @@ export default eventHandler(async (evt) => {
     const webhookUrl = `https://${host}/telegram-hook?secret_hash=${SECRET_HASH}`
     const isSet = await bot.telegram.setWebhook(webhookUrl)
     const info = await bot.telegram.getWebhookInfo()
-    return `Set webhook to ${webhookUrl}: ${isSet}<br/>${JSON.stringify(info)}`
+    return `Set webhook to ${webhookUrl.replaceAll(
+      SECRET_HASH,
+      "*"
+    )}: ${isSet}<br/>${JSON.stringify(info).replaceAll(
+      SECRET_HASH,
+      "*"
+    )}`
   } else if (query.secret_hash === SECRET_HASH) {
     const body = await readBody(evt)
     await bot.handleUpdate(body)