Rogeeandrogee a2e4f9a1e8 HH-540: scope iframe policy to Widget page (#123) ...

* fix(HH-540): scope iframe policy to widget page

* fix(HH-540): reject non-string allowed domains

---------

Co-authored-by: Rogee <rogee@ipao.vip>

2026-08-23 18:37:08 +08:00

..

cmd

fix(deploy): reuse shared redis and serve dashboard at root

2026-08-23 17:32:02 +08:00

configs

HH-445: deploy production observability and runbooks (#96)

2026-08-22 19:39:57 +08:00

docs

Reorganize repo: backend/, deploy/, docs/ layout + AGENTS.md

2026-07-07 14:44:12 +08:00

internal

HH-540: scope iframe policy to Widget page (#123)

2026-08-23 18:37:08 +08:00

migrations

fix(HH-528): persist auto resolve message (#116)

2026-08-23 16:54:20 +08:00

pkg

[H-337] Fix Captain provider runtime and knowledge flow (#61)

2026-08-20 14:46:01 +08:00

scripts

fix(deploy): reuse shared redis and serve dashboard at root

2026-08-23 17:32:02 +08:00

tests

HH-502: cover non-widget message sender events (#113)

2026-08-23 07:40:38 +08:00

.air.toml

Reorganize repo: backend/, deploy/, docs/ layout + AGENTS.md

2026-07-07 14:44:12 +08:00

go.mod

HH-443: establish production CI and supply-chain evidence (#93)

2026-08-22 03:26:38 +08:00

go.sum

HH-443: establish production CI and supply-chain evidence (#93)

2026-08-22 03:26:38 +08:00

Makefile

chore(H-296): remove GitHub Actions workflow (#55)

2026-08-19 17:02:37 +08:00