Headers provided for a webhook can now be marked as secret. A secret header value can not be revealed in plain text anywhere in the system, including the Web App, API responses and webhook logs. Only the webhook target is able to recive the value of the secret header.

Headers can be marked secret in the Web App webhook editor or using the Content Management API.