Revalidate webhook destinations before every delivery.

[sanjana2505006]

Summary

• Extract shared webhook destination safety checks (DNS resolve + private/loopback rejection)
• Revalidate the target URL immediately before each delivery attempt
• Log and record blocked deliveries; pin the validated IP and disable redirects
  Closes 🔒 Revalidate Webhook Destination Safety Before Every Delivery #919

Test plan

• Create a webhook with a public URL and confirm delivery still works
• Point a webhook hostname at a private IP (or mock DNS) and confirm delivery is blocked and logged
• Confirm create/update still reject localhost/private URLs
• npm test --prefix server -- --testPathPatterns=webhookUrlSafety --forceExit

[vercel]

@sanjana2505006 is attempting to deploy a commit to the Shiv Raj Singh's projects Team on Vercel.

A member of the Team first needs to authorize it.

[coderabbitai]

Warning

Review limit reached

@sanjana2505006, you've reached your PR review limit, so we couldn't start this review.

Next review available in: 30 minutes

Enable usage-based reviews in Billing to review now. Otherwise, wait until the next included review is available.
You're only billed for reviews past your plan's rate limits ($0.25/file).

How can I continue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based reviews.

How do review limits work?

CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan review availability.

For paid Pro and Pro+ PR reviews, CodeRabbit uses adaptive limits for sustained high-volume activity. When a developer's recent PR review activity reaches the 95th percentile or higher among CodeRabbit users, additional reviews become available more gradually as earlier reviews age out of the rolling window.

Please refer docs for additional details.

Review details

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 1419c8c2-22e6-4dcd-ba62-ead4290d2562

📥 Commits

Reviewing files that changed from the base of the PR and between fd8d392 and 2a1aa91.

📒 Files selected for processing (5)

• server/controllers/webhookController.js
• server/services/webhookDispatcherService.js
• server/tests/webhook.test.js
• server/tests/webhookUrlSafety.test.js
• server/utils/webhookUrlSafety.js

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Hi @sanjana2505006, thank you so much for your PR! 🎉

📋 PR Review Checklist

• Linked issue provided
• PR description present
• Branch naming valid - branch: feat/webhook-destination-revalidation-919
• Checklist reviewed - complete relevant items in PR template
• Screenshots - optional unless UI changed
• Issue 🔒 Revalidate Webhook Destination Safety Before Every Delivery #919 open
• Issue 🔒 Revalidate Webhook Destination Safety Before Every Delivery #919 assigned contributor
• Build and lint status - checks pending

We appreciate the effort you've put in — let us know if you need any help getting this across the finish line! 💪

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
meetonmemory	Ready	Preview	Jul 30, 2026 6:42pm

[github-actions]

Hi @sanjana2505006, thank you so much for this solid contribution! 🎉🚀

Your PR #928 (Revalidate webhook destinations before every delivery.) has been merged. ✅

Related issue: #919 (🔒 Revalidate Webhook Destination Safety Before Every Delivery).

This update fits nicely into the project and is genuinely appreciated — great work! We'd love to see you contribute again soon. 💙

⭐ If you're enjoying MeetOnMemory, please consider starring the repository — it really helps us out!