Skip to content

Subscription Verification Request Incorrectly Encoded

Subscription verification request (the request that the Register service sends to verify that a Push endpoint is valid) improperly encodes the hmac query string parameter, which allows raw = in the hmac query string parameter, which in tern can cause subscription creation to fail.

Testing a fix locally before publishing.