Rated 9.8 out of 10 in severity, the flaw could allow a remote attacker to gain unauthorized access to applications.
The example uses res.format() to send different responses (HTML, JSON, text) depending on what the client asks for using the Accept header. But the example does not include the Vary: Accept header.
When using the HTTP block to send a request to the Notion API, I get a 400 for 'invalid request url' because Predefined Auth Headers are overriding the existing ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback