Vishnu Narayanan 1e7218d439 fix: compare HMAC identity hashes securely (#14945) ...

This switches widget and public inbox HMAC identity checks from direct
string equality to constant-time comparison with a length guard.

Fixes
[https://linear.app/chatwoot/issue/CW-6937](https://linear.app/chatwoot/issue/CW-6937)
Fixes
[https://linear.app/chatwoot/issue/CW-7464](https://linear.app/chatwoot/issue/CW-7464)
Fixes
[https://linear.app/chatwoot/issue/CW-7227](https://linear.app/chatwoot/issue/CW-7227)

2026-07-07 17:37:22 +05:30

..

actions

fix: Skip redundant contact saves in ContactIdentifyAction (#13778)

2026-03-11 21:40:38 -07:00

assets

…

builders

feat: Add report bar drilldown drawer (#14626)

2026-07-02 16:07:26 +05:30

channels

…

controllers

fix: compare HMAC identity hashes securely (#14945)

2026-07-07 17:37:22 +05:30

dashboards

feat: Harden model override preferences (5/6) (#14846)

2026-06-25 17:38:11 +05:30

dispatchers

feat: Unread Count: added api, store refresher, invalidation and events (2/3)[CW-6851] (#14369)

2026-05-20 17:36:09 +05:30

drops

fix(drops): Resolve first_name for single-word contact and agent names (#13488)

2026-06-05 10:03:24 +04:00

fields

fix(super-admin): prefill confirmed_at in new user form (#13662)

2026-03-10 12:14:58 +05:30

finders

revert: Sidebar unread counts for filters (CW-7262) (#14769)

2026-06-17 14:58:48 +04:00

helpers

feat: billing brl pix new users (#14617)

2026-07-06 16:35:38 +05:30

javascript

refactor: optimize agent bot assignment dropdown (#14866)

2026-07-07 14:25:54 +05:30

jobs

feat: manage active user sessions from profile (CW-7169) (#14556)

2026-06-12 16:11:07 +05:30

listeners

revert: Sidebar unread counts for filters (CW-7262) (#14769)

2026-06-17 14:58:48 +04:00

mailboxes

fix(email): strip null bytes from inbound mailbox messages (#14546)

2026-06-08 17:12:25 +05:30

mailers

fix: improve email inbox IMAP and SMTP compatibility (#14589)

2026-06-03 15:56:54 +05:30

models

feat: drag to reorder help center articles across pages (#14910)

2026-07-02 15:47:01 +05:30

policies

feat: billing brl pix new users (#14617)

2026-07-06 16:35:38 +05:30

presenters

fix: include account data in webhook payloads (#12445)

2026-06-09 12:12:46 +05:30

services

feat: Add report bar drilldown drawer (#14626)

2026-07-02 16:07:26 +05:30

views

refactor: optimize agent bot assignment dropdown (#14866)

2026-07-07 14:25:54 +05:30