Rogeeandrogee eb83d241fe HH-547: allow cross-origin widget requests (#126) ...

* HH-547: allow cross-origin widget requests

* fix(HH-547): align production preflight with wildcard CORS

---------

Co-authored-by: Rogee <rogee@ipao.vip>

2026-08-23 20:11:04 +08:00

..

app

fix(security): harden auth and secret handling (HH-444) (#101)

2026-08-22 15:45:06 +08:00

auth

fix(security): harden auth and secret handling (HH-444) (#101)

2026-08-22 15:45:06 +08:00

autoassignment

test(autoassignment): report cleanup errors (HH-423) (#79)

2026-08-21 14:41:25 +08:00

automation

HH-530: replace user-facing Chatwoot branding with GoChat (#117)

2026-08-23 18:14:02 +08:00

campaign

H-338: close H-335 release blockers (#59)

2026-08-20 10:21:19 +08:00

canned

Reorganize repo: backend/, deploy/, docs/ layout + AGENTS.md

2026-07-07 14:44:12 +08:00

channel

fix(security): harden auth and secret handling (HH-444) (#101)

2026-08-22 15:45:06 +08:00

config

HH-547: allow cross-origin widget requests (#126)

2026-08-23 20:11:04 +08:00

csat

H-300: wire Captain Skills into Web runtime (#48)

2026-08-19 07:08:14 +08:00

database

fix(HH-528): persist auto resolve message (#116)

2026-08-23 16:54:20 +08:00

dispatch

H-141: harden worker shutdown persistence (#24)

2026-08-14 22:43:01 +08:00

goimap_stub

test: improve backend unit coverage

2026-08-04 12:26:25 +08:00

handler

HH-540: scope iframe policy to Widget page (#123)

2026-08-23 18:37:08 +08:00

lifecycle

HH-442: isolate runtime processes and harden shutdown (#90)

2026-08-22 02:38:15 +08:00

llm

H-286: tighten live Skill response contract (#50)

2026-08-19 10:34:30 +08:00

middleware

HH-547: allow cross-origin widget requests (#126)

2026-08-23 20:11:04 +08:00

model

fix(HH-528): persist auto resolve message (#116)

2026-08-23 16:54:20 +08:00

oauth/credentialstore

test: improve backend unit coverage

2026-08-04 12:26:25 +08:00

pgvector_stub

fix(ui): 自定义工具表单 overflow-y-scroll→auto + 认证方式NONE翻译改为'无' + Captain文档爬虫/同步后端

2026-08-01 21:25:55 +08:00

pubsub

H-300: wire Captain Skills into Web runtime (#48)

2026-08-19 07:08:14 +08:00

reporting

H-300: wire Captain Skills into Web runtime (#48)

2026-08-19 07:08:14 +08:00

repository

HH-443: establish production CI and supply-chain evidence (#93)

2026-08-22 03:26:38 +08:00

router

HH-540: scope iframe policy to Widget page (#123)

2026-08-23 18:37:08 +08:00

search

test: improve backend unit coverage

2026-08-04 12:26:25 +08:00

search_search_bak_offline.bak

Reorganize repo: backend/, deploy/, docs/ layout + AGENTS.md

2026-07-07 14:44:12 +08:00

security

HH-452: cover upload security boundaries (#106)

2026-08-22 21:19:43 +08:00

service

HH-540: scope iframe policy to Widget page (#123)

2026-08-23 18:37:08 +08:00

webhookutil

H-116: close visitor payload trust boundaries (#19)

2026-08-15 01:15:04 +08:00

worker

HH-442: isolate runtime processes and harden shutdown (#90)

2026-08-22 02:38:15 +08:00

ws

fix(security): harden auth and secret handling (HH-444) (#101)

2026-08-22 15:45:06 +08:00

wsevent

HH-469: close WebSocket fanout contract gaps (#109)

2026-08-23 00:22:01 +08:00