| @@ -32,15 +32,18 @@ | ||
| 32 | 32 | $_route = $request->get_route(); |
| 33 | 33 | |
| 34 | 34 | // Handle logo generation callback endpoint |
| 35 | 35 | if ( '/templately/v1/logo-generation/callback' === $_route ) { |
| 36 | - Helper::log( | |
| 37 | - [ | |
| 38 | - 'headers' => $request->get_headers(), | |
| 39 | - 'body' => $request->get_params(), | |
| 40 | - ], | |
| 41 | - 'logo_generation_callback_request' | |
| 42 | - ); | |
| 36 | + // Disabled: the headers carry X-Templately-Apikey, and Helper::log() | |
| 37 | + // writes to debug.log, which is web-readable on plenty of hosts. That | |
| 38 | + // key authorizes this very route. | |
| 39 | + // Helper::log( | |
| 40 | + // [ | |
| 41 | + // 'headers' => $request->get_headers(), | |
| 42 | + // 'body' => $request->get_params(), | |
| 43 | + // ], | |
| 44 | + // 'logo_generation_callback_request' | |
| 45 | + // ); | |
| 43 | 46 | |
| 44 | 47 | if ( empty( $process_id ) ) { |
| 45 | 48 | return $this->error( 'invalid_id', __( 'Invalid ID.', 'templately' ), 'logo_generation_callback', 400 ); |
| 46 | 49 | } |
