Logo
Explore Help
Register Sign In
akadmin/chatwoot
Watch 1
Star 0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
Files
8d2ef4ec5e47b2f695f3be58c0a0dba628ce8b9e
chatwoot/app/controllers/api/v1/widget
T
History
Vishnu NarayananandGitHub 1e7218d439 fix: compare HMAC identity hashes securely (#14945)
This switches widget and public inbox HMAC identity checks from direct
string equality to constant-time comparison with a length guard.

Fixes
[https://linear.app/chatwoot/issue/CW-6937](https://linear.app/chatwoot/issue/CW-6937)
Fixes
[https://linear.app/chatwoot/issue/CW-7464](https://linear.app/chatwoot/issue/CW-7464)
Fixes
[https://linear.app/chatwoot/issue/CW-7227](https://linear.app/chatwoot/issue/CW-7227)
2026-07-07 17:37:22 +05:30
..
integrations
feat: migrate dyte integration to cloudflare realtimekit (#14752)
2026-06-24 11:04:08 +04:00
base_controller.rb
…
campaigns_controller.rb
fix: Show campaigns only if the feature is enabled (#11420)
2025-05-05 19:41:28 -07:00
configs_controller.rb
feat: allow configuring attachment upload limit (#12835)
2025-11-17 14:03:08 -08:00
contacts_controller.rb
fix: compare HMAC identity hashes securely (#14945)
2026-07-07 17:37:22 +05:30
conversations_controller.rb
fix: disable email transcript for free plans (#13509)
2026-02-11 21:21:36 +05:30
direct_uploads_controller.rb
…
events_controller.rb
…
inbox_members_controller.rb
fix: Improve performance of most hit APIs in widget (#11089)
2025-03-14 17:37:36 -07:00
labels_controller.rb
…
messages_controller.rb
fix: incorrect scope across controllers (#14459)
2026-05-14 20:34:18 +05:30
Powered by Gitea Version: 1.27.0 Page: 1289ms Template: 3ms
Auto
English
Bahasa Indonesia Deutsch English Español Français Gaeilge Italiano Latviešu Magyar nyelv Nederlands Polski Português de Portugal Português do Brasil Suomi Svenska Türkçe Čeština Ελληνικά Български Русский Українська فارسی മലയാളം 日本語 简体中文 繁體中文(台灣) 繁體中文(香港) 한국어
Licenses API