Vinay Keerthi eee307b36b fix: add postMessage origin validation in widget SDK ...

Adds origin validation for postMessage communication in the widget SDK:
- Extract and validate origin from configured baseUrl
- Use specific target origin instead of wildcard when sending messages
- Validate sender origin when receiving messages

Fixes: CW-6301

2026-01-12 16:27:52 +05:30

..

specs

feat: Use vitest instead of jest, run all the specs anywhere in app/ folder in the CI (#9722)

2024-07-10 08:32:16 -07:00

bubbleHelpers.js

feat: handle rails turbo morphing (#11422)

2025-05-07 10:22:08 +05:30

constants.js

feat: Add an option to use darkMode only in the widget (#7151)

2023-05-22 09:05:05 +05:30

cookieHelpers.js

fix: Cookies.set does not stringify JSON (#8807)

2024-01-29 18:14:49 +05:30

DOMHelpers.js

feat: handle rails turbo morphing (#11422)

2025-05-07 10:22:08 +05:30

IFrameHelper.js

fix: add postMessage origin validation in widget SDK

2026-01-12 16:27:52 +05:30

sdk.js

fix: Alignment issue with logo in standard type bubble (#11364)

2025-04-24 21:57:52 +05:30

settingsHelper.js

feat: Support Dark mode for the widget (#4137)

2022-04-01 20:59:03 +05:30