From 75c9b753a8e4feed8f681ad76fe8f125b0016366 Mon Sep 17 00:00:00 2001
From: kolaente <k@knt.li>
Date: Mon, 23 Mar 2026 16:11:43 +0100
Subject: [PATCH] fix: strip BasicAuth credentials from project webhook API
 responses

---
 pkg/models/webhooks.go | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/pkg/models/webhooks.go b/pkg/models/webhooks.go
index 98975dd7b..dfd978818 100644
--- a/pkg/models/webhooks.go
+++ b/pkg/models/webhooks.go
@@ -234,6 +234,8 @@ func (w *Webhook) ReadAll(s *xorm.Session, a web.Auth, _ string, page int, perPa
 
 	for _, webhook := range ws {
 		webhook.Secret = ""
+		webhook.BasicAuthUser = ""
+		webhook.BasicAuthPassword = ""
 		if createdBy, has := users[webhook.CreatedByID]; has {
 			webhook.CreatedBy = createdBy
 		}