diff --git a/src/Symfony/Component/Mailer/Bridge/Postmark/Webhook/PostmarkRequestParser.php b/src/Symfony/Component/Mailer/Bridge/Postmark/Webhook/PostmarkRequestParser.php index 03326a697087..033ea8c2808a 100644 --- a/src/Symfony/Component/Mailer/Bridge/Postmark/Webhook/PostmarkRequestParser.php +++ b/src/Symfony/Component/Mailer/Bridge/Postmark/Webhook/PostmarkRequestParser.php @@ -27,6 +27,10 @@ final class PostmarkRequestParser extends AbstractRequestParser { public function __construct( private readonly PostmarkPayloadConverter $converter, + + // https://postmarkapp.com/support/article/800-ips-for-firewalls#webhooks + // localhost is added for testing + private readonly array $allowedIPs = ['3.134.147.250', '50.31.156.6', '50.31.156.77', '18.217.206.57', '127.0.0.1'], ) { } @@ -34,9 +38,7 @@ protected function getRequestMatcher(): RequestMatcherInterface { return new ChainRequestMatcher([ new MethodRequestMatcher('POST'), - // https://postmarkapp.com/support/article/800-ips-for-firewalls#webhooks - // localhost is added for testing - new IpsRequestMatcher(['3.134.147.250', '50.31.156.6', '50.31.156.77', '18.217.206.57', '127.0.0.1']), + new IpsRequestMatcher($this->allowedIPs), new IsJsonRequestMatcher(), ]); }
Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.
Alternative Proxies: