Vishnu NarayananandGitHub 1e7218d439 fix: compare HMAC identity hashes securely (#14945) ...

This switches widget and public inbox HMAC identity checks from direct
string equality to constant-time comparison with a length guard.

Fixes
[https://linear.app/chatwoot/issue/CW-6937](https://linear.app/chatwoot/issue/CW-6937)
Fixes
[https://linear.app/chatwoot/issue/CW-7464](https://linear.app/chatwoot/issue/CW-7464)
Fixes
[https://linear.app/chatwoot/issue/CW-7227](https://linear.app/chatwoot/issue/CW-7227)

2026-07-07 17:37:22 +05:30

..

inboxes

fix: compare HMAC identity hashes securely (#14945)

2026-07-07 17:37:22 +05:30

portals

fix(help-center): documentation layout on custom domain root, locale (#14850)

2026-06-24 16:12:55 -07:00

csat_survey_controller.rb

feat: CSAT response public APIs (#2670)

2021-07-28 14:59:13 +05:30

inboxes_controller.rb

fix: incorrect scope across controllers (#14459)

2026-05-14 20:34:18 +05:30

portals_controller.rb

fix(help-center): documentation layout on custom domain root, locale (#14850)

2026-06-24 16:12:55 -07:00