Vinay Keerthi eee307b36b fix: add postMessage origin validation in widget SDK ...

Adds origin validation for postMessage communication in the widget SDK:
- Extract and validate origin from configured baseUrl
- Use specific target origin instead of wildcard when sending messages
- Validate sender origin when receiving messages

Fixes: CW-6301

2026-01-12 16:27:52 +05:30

..

actions

fix: Disable enqueueing Avatar jobs if the URL is invalid (#12035)

2025-07-24 12:56:39 +04:00

assets

feat: Hide installation identifier (#11722)

2025-06-17 15:45:40 -07:00

builders

feat(ce): Add Year in review feature (#13078)

2025-12-15 17:24:45 -08:00

channels

fix: Move contact events to account stream rather than individual user stream (#11082)

2025-03-13 17:46:48 -07:00

controllers

feat: Use amplitude for Cloud Analytics (#13217)

2026-01-09 09:32:09 -08:00

dashboards

feat: Auto confirm user email when super admin make changes (#12418)

2025-09-23 20:14:02 +05:30

dispatchers

feat(ee): Add Captain features (#10665)

2025-01-14 16:15:47 -08:00

drops

feat: Add the support for custom attributes in message variables (#8511)

2023-12-08 14:13:35 -08:00

fields

chore: improve plan-based feature handling with plan hierarchy (#11335)

2025-04-28 14:13:56 -07:00

finders

feat: add SKIP_INCOMING_BCC_PROCESSING as internal config (#12484)

2025-09-22 17:52:56 +05:30

helpers

feat: TikTok channel (#12741)

2025-12-17 07:54:50 -08:00

javascript

fix: add postMessage origin validation in widget SDK

2026-01-12 16:27:52 +05:30

jobs

fix: Avoid double notification email after importing contacts (#13150)

2026-01-09 15:11:19 -08:00

listeners

fix: pass serialized data in notification.deleted event to avoid Deserialisation (#13061)

2026-01-12 13:15:40 +05:30

mailboxes

refactor: strategy pattern for mailbox conversation finding (#12766)

2025-11-10 20:47:18 +05:30

mailers

feat: TikTok channel (#12741)

2025-12-17 07:54:50 -08:00

models

fix: pass serialized data in notification.deleted event to avoid Deserialisation (#13061)

2026-01-12 13:15:40 +05:30

policies

feat: Add AI credit topup flow for Stripe (#12988)

2025-12-02 17:53:44 -08:00

presenters

feat(CW-6187): include headers from incoming emails (#13139)

2026-01-07 12:45:54 +05:30

services

feat: Advanced Search Backend (#12917)

2026-01-07 15:30:49 +05:30

views

feat: Use amplitude for Cloud Analytics (#13217)

2026-01-09 09:32:09 -08:00