Vishnu NarayananandGitHub 1e7218d439 fix: compare HMAC identity hashes securely (#14945) ...

This switches widget and public inbox HMAC identity checks from direct
string equality to constant-time comparison with a length guard.

Fixes
[https://linear.app/chatwoot/issue/CW-6937](https://linear.app/chatwoot/issue/CW-6937)
Fixes
[https://linear.app/chatwoot/issue/CW-7464](https://linear.app/chatwoot/issue/CW-7464)
Fixes
[https://linear.app/chatwoot/issue/CW-7227](https://linear.app/chatwoot/issue/CW-7227)

2026-07-07 17:37:22 +05:30

..

contacts_controller.rb

fix: compare HMAC identity hashes securely (#14945)

2026-07-07 17:37:22 +05:30

conversations_controller.rb

fix: Incorrect contact access in conversations listing (#11797)

2025-09-22 17:05:11 +05:30

messages_controller.rb

feat: Ability to update CSAT over Client APIs (#6470)

2023-03-08 18:42:49 +05:30