From c2c83b1e362064ef938e191e1197b43f875fb6b4 Mon Sep 17 00:00:00 2001 From: Paul Hutchinson Date: Fri, 14 Nov 2025 11:16:59 +0000 Subject: [PATCH 1/2] [feature] SC-166737/improve app proxy security by restricting where token replacements can go --- manifest.json | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/manifest.json b/manifest.json index 865b26c..3e535e0 100644 --- a/manifest.json +++ b/manifest.json @@ -62,7 +62,15 @@ "PUT", "DELETE" ], - "timeout": 15 + "timeout": 15, + "settingsInjection": { + "aircall_api_id": { + "headers": ["Authorization"] + }, + "aircall_api_token": { + "headers": ["Authorization"] + } + } } ] } From b3e22c390585f15782ec8c373e1b963a45d7484c Mon Sep 17 00:00:00 2001 From: Paul Hutchinson Date: Wed, 19 Nov 2025 12:33:22 +0000 Subject: [PATCH 2/2] [feature] SC-166737/improve app proxy security by restricting where token replacements can go --- manifest.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/manifest.json b/manifest.json index 3e535e0..81ea429 100644 --- a/manifest.json +++ b/manifest.json @@ -65,10 +65,10 @@ "timeout": 15, "settingsInjection": { "aircall_api_id": { - "headers": ["Authorization"] + "header": ["Authorization"] }, "aircall_api_token": { - "headers": ["Authorization"] + "header": ["Authorization"] } } }