mirror of
https://github.com/abhinavxd/libredesk.git
synced 2026-09-10 14:15:42 +00:00
f7cbfb525c
- Gate widget inbox_id on UUID to prevent enumeration. - Throttle inbound WS frames per connection (typing/page_visit/ping) - Restrict admin-set URLs to http/https - Apply closed-conversation reply guard to media upload path (was text-only) - Reject empty uploads and use io.ReadAll - Validate inbox config before DB create; drop unused func VerifySignature