Logo
Explore Help
Register Sign In
akadmin/chatwoot
Watch 1
Star 0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
Files
d3b294fe9cd70d9eff39f9153a397a9f2dc2ce15
chatwoot/app/controllers/api/v1/widget
T
History
Vishnu NarayananandGitHub 1e7218d439 fix: compare HMAC identity hashes securely (#14945)
This switches widget and public inbox HMAC identity checks from direct
string equality to constant-time comparison with a length guard.

Fixes
[https://linear.app/chatwoot/issue/CW-6937](https://linear.app/chatwoot/issue/CW-6937)
Fixes
[https://linear.app/chatwoot/issue/CW-7464](https://linear.app/chatwoot/issue/CW-7464)
Fixes
[https://linear.app/chatwoot/issue/CW-7227](https://linear.app/chatwoot/issue/CW-7227)
2026-07-07 17:37:22 +05:30
..
integrations
feat: migrate dyte integration to cloudflare realtimekit (#14752)
2026-06-24 11:04:08 +04:00
base_controller.rb
…
campaigns_controller.rb
…
configs_controller.rb
feat: allow configuring attachment upload limit (#12835)
2025-11-17 14:03:08 -08:00
contacts_controller.rb
fix: compare HMAC identity hashes securely (#14945)
2026-07-07 17:37:22 +05:30
conversations_controller.rb
fix: disable email transcript for free plans (#13509)
2026-02-11 21:21:36 +05:30
direct_uploads_controller.rb
…
events_controller.rb
…
inbox_members_controller.rb
…
labels_controller.rb
…
messages_controller.rb
fix: incorrect scope across controllers (#14459)
2026-05-14 20:34:18 +05:30
Powered by Gitea Version: 1.27.0 Page: 1691ms Template: 102ms
Auto
English
Bahasa Indonesia Deutsch English Español Français Gaeilge Italiano Latviešu Magyar nyelv Nederlands Polski Português de Portugal Português do Brasil Suomi Svenska Türkçe Čeština Ελληνικά Български Русский Українська فارسی മലയാളം 日本語 简体中文 繁體中文(台灣) 繁體中文(香港) 한국어
Licenses API