fix: X-Twilio-Signature validation when URL query parameters contain …

…@ or : (#621)
twilio · Nov 5, 2020 · 528fc25 · 528fc25
1 parent 90f4c46
commit 528fc25
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/lib/webhooks/webhooks.js b/lib/webhooks/webhooks.js
@@ -163,6 +163,8 @@ function validateExpressRequest(request, authToken, opts) {
     });
     if (request.originalUrl.search(/\?/) >= 0) {
       webhookUrl = webhookUrl.replace(/%3F/g, '?');
+      webhookUrl = webhookUrl.replace(/%3A/g, ':');
+      webhookUrl = webhookUrl.replace(/%40/g, '@');
     }
 
   }