Skip to main content

So I am using a Zapier webhook on my custom site to post some parameters to be passed on to the next application.

My concern is that, currently, the URL is visible to anyone by simply inspecting the page and looking at the JavaScript function.

How can I hide it more securely/is this even a concern?

 

Here is an example snippet of the code:

                            var webhookURL = "https://hooks.zapier.com/hooks/catch/XXXXXX/";

 

                            var data = {

 

                                "First Name" : userName.value,

                                "Email" : userEmail.value,

                            };

 

                            request.open("POST", webhookURL, true);

Hi @Financial Birds and Bees 

Good question.

From Zap help articles about webhooks: https://zapier.com/apps/webhook/help

But if you make the URL public (e.g. in front-end JavaScript) anyone who finds it will be able to spam it and trigger your Zap. Treat it as a password or any other secret!