Shivam Mishra a42b99ada0 fix(sdk): Ignore messages from a different origin and sanitize URLs (#8879) ...

This PR includes some specific security related fixes

1. Validate the origin of any message events
2. Sanitize URLs before opening them

---------

Co-authored-by: Pranav <pranav@chatwoot.com>
Co-authored-by: Muhsin Keloth <muhsinkeramam@gmail.com>

2025-08-14 14:33:32 +05:30

..

specs

feat: Use vitest instead of jest, run all the specs anywhere in app/ folder in the CI (#9722)

2024-07-10 08:32:16 -07:00

bubbleHelpers.js

feat: handle rails turbo morphing (#11422)

2025-05-07 10:22:08 +05:30

constants.js

feat: Add an option to use darkMode only in the widget (#7151)

2023-05-22 09:05:05 +05:30

cookieHelpers.js

fix: Cookies.set does not stringify JSON (#8807)

2024-01-29 18:14:49 +05:30

DOMHelpers.js

feat: handle rails turbo morphing (#11422)

2025-05-07 10:22:08 +05:30

IFrameHelper.js

fix(sdk): Ignore messages from a different origin and sanitize URLs (#8879)

2025-08-14 14:33:32 +05:30

sdk.js

fix: Alignment issue with logo in standard type bubble (#11364)

2025-04-24 21:57:52 +05:30

settingsHelper.js

feat: Support Dark mode for the widget (#4137)

2022-04-01 20:59:03 +05:30