Webhook Valid URLs

The Valid Webhook URLs setting under the Developer section is required when using form webhooks in Zesty.io. This setting defines a list of approved webhook URLs for form submissions, ensuring data is only sent to trusted and authorized destinations.

When is this Required?

This setting is required when:

  • Your instance uses form webhooks to send form data to external systems
  • You need to restrict which URLs can receive form submissions
  • Forms on your site include _zesty_webhook or zwh fields

If your instance does not use form webhooks, this setting is not required for normal operation.

Overview

The Valid Webhook URLs setting restricts form submission forwarding to a predefined list of exact URLs. When configured, the WebEngine validates the webhook destination URL against this list before forwarding any form data.

For more information on how to add and manage settings, refer to the Settings Documentation.

Configuration

To configure the Valid Webhook URLs setting:

  1. Go to Settings in the left sidebar.
  2. Navigate to the Developer section.
  3. Locate the Valid Webhook URLs field.
  4. Enter a comma-separated list of exact webhook URLs

Example:

https://hooks.zapier.api.service1.com,https://hooks.zapier.api.service2.com
  1. Save your changes.

This ensures that form submissions are only sent to the specified URLs.

For more details on forms and webhooks, including how to set them up and use them effectively, visit the Forms and Form Webhooks Documentation.

Important Notes

  • URLs must match exactly what is provided in the form's _zesty_webhook or zwh fields
  • Wildcards or partial matches are not supported
  • Each URL should be complete and include the full path

Key Features

  • Security Controls: Prevents form data from being sent to unauthorized endpoints.
  • Exact Matching: Requires precise URL matches for validation
  • Required Setting: This setting must be configured. If left blank, the WebEngine will prompt users to update it.
  • Ease of Use: Simple comma-separated format for specifying allowed destinations.