gabrielg/mail_to_hip_chat — Issue #1: Possible security hole if no secret is provided
Author: gabrielg
Created: 2011-11-23 21:36:06+00:00
State: open

Someone can probably just give the md5 hash of the rest of the POST request as a signature, and have it be valid. Need to test/fix.