yogdaan/bridge

bridges for chat client

bridge's Issues

Disallow cross-origin requests on chat bridge's webhook

Currently @yogdaan-bot responds to post requests at https://yogdaanbot.herokuapp.com/hubot/gitter/Lobby
This is fine, but prone to spam. We could instead restrict the access to same-origin requests only since yogi.coffee triggers the webhook from a local url.

curl 'https://yogdaanbot.herokuapp.com/hubot/gitter/Lobby?room='yogdaan/lobby'' -H 'Origin: chrome-extension://fhbjgbiflinjbdggehcddcbncdddomop' -H 'Accept-Encoding: gzip, deflate, br' -H 'Accept-Language: en-US,en;q=0.9' -H 'User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36' -H 'Content-Type: application/json' -H 'Accept: */*' -H 'Cache-Control: no-cache' -H 'Connection: keep-alive' -H 'DNT: 1' -H 'Postman-Token: 1d0059c3-e006-e36b-6fd1-2176b3f0bf24' --data-binary $'{\n\x09"message" :{\n\x09\x09"from": {\n\x09\x09\x09"username":"yogi-bae",\n\x09\x09\x09"first_name":"I shouldn\'t be doing this"\n\x09\x09},\n\x09\x09"text":"Last one, I need to get this cURL"\n\x09}\n}' --compressed

remove telegram folder

Issue can be claimed by anyone as it is very easy.
Send a PR for deleting the telegram folder from the repository.

Thanks!

Files from telegram are not reproduced on gitter

Files shared in telegram group are not reproduced in gitter group like documents pictures
I think that one solution can be to host the file and reproduce the link on gitter

Create Readme.md

I think we need to create a readme file saying about the bridge app .

Direct commits !!

@gabru-md please don't do direct commits @dynamitechetan I think we should work on Best practices