Function expectMasterKeyRequired

spec/vulnerabilities.spec.js:4564–4571

    describe('(GHSA-8pjv-59c8-44p8) SSRF via Webhook URL requires master key', () => {
      const expectMasterKeyRequired = async promise => {
        try {
          await promise;
          fail('Expected request to be rejected');
        } catch (error) {
          expect(error.status).toBe(403);
        }
      };

      it('rejects registering a webhook function with internal URL without master key', async () => {
        await expectMasterKeyRequired(