If you think doorbell-js is leaking a check or comparing signatures with ===, email sardarhashim30@gmail.com.
Please do not open a public issue for an unpatched bypass.
Include the provider, a redacted header, and whether the body went through a JSON parser.