<aside> 🔥

This was testing if you can:

  1. Have a malicious Notion page and database with an automation that forwards all page additions and edits to an attacker’s webhook
  2. Someone duplicates this page as a template
  3. It continues to use the webook to send all of the page information to the attacker

This didn’t work because it clears the webhook on duplication! Good job, Notion!

</aside>

Database