restrict Stripe webhook plan ids

2026-09-06 17:56:07 +03:00
parent 661612d97f
commit 8f62f2f0cf
1 changed files with 2 additions and 1 deletions
@@ -1321,7 +1321,8 @@ const server = http.createServer(async (req, res) => {
            const rawEmail = o.client_reference_id || o.customer_email || o.metadata?.email || '';
            const email = typeof rawEmail === 'string' ? rawEmail.trim().toLowerCase() : '';
            const rawPlanId = o.metadata?.planId;
-            const planId = typeof rawPlanId === 'string' && rawPlanId.trim() ? rawPlanId.trim() : 'pro';
+            const candidatePlan = typeof rawPlanId === 'string' ? rawPlanId.trim() : '';
+            const planId = ['pro', 'kurumsal'].includes(candidatePlan) ? candidatePlan : 'pro';
            if (email) {
              store.setPlan(email, {
                plan: planId, kaynak: 'stripe',