This prevents user retrieve arbitrary webhook by changing URL to access webhook from other unauthorized repositories.
Was using the wrong method and now uses the method which checks if the avatar link is relative or not.