Merge pull request carlos-jenkins#7 from nmaupu/patch-1

carlos-jenkins · carlos-jenkins · commit 6ccee5a2c178 · 2016-01-06T19:12:56.000-06:00
fix: dev: Return 403 error when secret is enabled but no header is present in the request.
diff --git a/webhooks.py b/webhooks.py
@@ -69,7 +69,11 @@ def index():
     secret = config.get('enforce_secret', '')
     if secret:
         # Only SHA1 is supported
-        sha_name, signature = request.headers.get('X-Hub-Signature').split('=')
+        header_signature = request.headers.get('X-Hub-Signature')
+        if header_signature is None:
+            abort(403)
+        
+        sha_name, signature = header_signature.split('=')
         if sha_name != 'sha1':
             abort(501)
 
