diff --git a/src/Webhooks/IncomingWebhook.php b/src/Webhooks/IncomingWebhook.php index 93b7893..ebdd012 100644 --- a/src/Webhooks/IncomingWebhook.php +++ b/src/Webhooks/IncomingWebhook.php @@ -78,7 +78,7 @@ protected function validateSignature(): void $signature = $this->generateSignature(); $header = $this->findHeader(self::SIGNATURE_HEADERS); - if ($signature !== $header) { + if (hash_equals($signature, $header) === false) { throw new InvalidSignatureException($signature, $header); } }