← All changes | includes/API/LogoGeneration.php +10 -7 3.6.3 → 3.7.2 View file →

		@@ -32,15 +32,18 @@
32	32	$_route = $request->get_route();
33	33
34	34	// Handle logo generation callback endpoint
35	35	if ( '/templately/v1/logo-generation/callback' === $_route ) {
36		- Helper::log(
37		- [
38		- 'headers' => $request->get_headers(),
39		- 'body' => $request->get_params(),
40		- ],
41		- 'logo_generation_callback_request'
42		- );
	36	+ // Disabled: the headers carry X-Templately-Apikey, and Helper::log()
	37	+ // writes to debug.log, which is web-readable on plenty of hosts. That
	38	+ // key authorizes this very route.
	39	+ // Helper::log(
	40	+ // [
	41	+ // 'headers' => $request->get_headers(),
	42	+ // 'body' => $request->get_params(),
	43	+ // ],
	44	+ // 'logo_generation_callback_request'
	45	+ // );
43	46
44	47	if ( empty( $process_id ) ) {
45	48	return $this->error( 'invalid_id', __( 'Invalid ID.', 'templately' ), 'logo_generation_callback', 400 );
46	49	}