Vulnerability in EPiServer.Forms
Trying to setup a method receiving data from Forms webhooks and have an APiController to recieve the data. Trying the address from Postman all works fine but when setting up the form with the same webhook url the recieving method is not triggered. No error i visible inte logs and the EmailActor is working. How do I debug this?
The receiving controller looks like this trying to debug this
public class FormsWebhooksController : ApiController
private static readonly ILogger Logger = LogManager.GetLogger(typeof(FormsWebhooksController));
public string GenericForm([FromBody]JToken jsonbody)
string name = jsonbody["Name"]?.ToString();
catch (Exception e)
Logger.Error("Failed to process webhook!", e);
Running the site in IISExpress from Console only displays this call, as otherwise would display the webhook call aswell as explained here: [Episerver form addon] webhook is not being fired | Optimizely De
Do you mind me asking, what's your use case for doing this as a WebAPI, are you putting this in another project/solution outside of the CMS application?
Have you tried hitting the hook via Postman to make sure your routing is working? Attribute routing needs to be enabled as part of the WebAPI configuration?
Ok the error seems to be something with the devlopment environment since it clearly triggers the webhook, as tested with webhook.site (very good tool), and the code works when trying it on stage environment. If I find the cause and the solution can be of use here I will post it.