chatwoot

Files

T

Vishnu NarayananandGitHub 1e7218d439 fix: compare HMAC identity hashes securely (#14945 )

This switches widget and public inbox HMAC identity checks from direct
string equality to constant-time comparison with a length guard.

Fixes
[https://linear.app/chatwoot/issue/CW-6937](https://linear.app/chatwoot/issue/CW-6937)
Fixes
[https://linear.app/chatwoot/issue/CW-7464](https://linear.app/chatwoot/issue/CW-7464)
Fixes
[https://linear.app/chatwoot/issue/CW-7227](https://linear.app/chatwoot/issue/CW-7227)

2026-07-07 17:37:22 +05:30

accounts

feat: default new accounts to captain v2 (#14917 )

2026-07-07 16:21:51 +05:30

integrations

feat: Slack link unfurling (#7940 )

2023-09-29 19:35:56 +05:30

profile

feat: manage active user sessions from profile (CW-7169) (#14556 )

2026-06-12 16:11:07 +05:30

widget

fix: compare HMAC identity hashes securely (#14945 )