EmbeddedChat

EmbeddedChat copied to clipboard

Nested quote attachments do not render message content or media correctly

4

### Description: Media attachments (images, audio, video) inside quoted messages are not rendered correctly when they are nested inside another attachment structure. Additionally, when a nested quote contains only text...

Khizarshah01

fix(api): escape json body in api calls to prevent injection

1

This pr address the escape json body in api calls to prevent injection Closes #1067 ## Video/Screenshots ## PR Test Details **Note**: The PR will be ready for live testing...

deepak0x

fix: correctly render nested quotes media attachments in quotes

1

# Brief Title Fix nested quoted media rendering and incorrect attachment metadata # Description This PR fixes an issue where media attachments (images, audio, video) inside nested quoted messages were...

Khizarshah01

Fix/embedded chat channelname not switching

5

# Enable Channel Switching by Channel Name Closes #452 ## Overview This PR adds the ability to switch channels using channel names instead of requiring room IDs. Previously, users had...

deepak0x

The `useMediaRecorder` and `useNewMediaRecorder` hooks attach event listeners to `MediaRecorder` instances using `addEventListener`, but never remove them. When recording is started multiple times, new `MediaRecorder` instances are created while old...

deepak0x

feat: Added max length validation in file upload modal in file description

1

# Brief Title ## Acceptance Criteria fulfillment - [ ] Added a 5000-character limit for the file description - [ ] Show an alert message when the description exceeds the...

srijnabhargav

Bug: Critical JSON Injection in API Request Construction

3

Several API methods in `EmbeddedChatApi.ts` manually construct JSON request bodies using template literals instead of proper serialization. When user input contains special characters such as double quotes (`"`), the generated...

deepak0x

Missing Origin Validation in OAuth Callback (Login CSRF)

1

In `loginWithRocketChatOAuth.ts`, the OAuth callback is handled using a `postMessage` event listener. The listener processes incoming messages based only on the message payload and does **not validate the origin** of...

deepak0x

- Replace deprecated rooms.upload endpoint with new two-step process - Step 1: POST to rooms.media/:rid to upload file - Step 2: POST to rooms.mediaConfirm/:rid/:fileId to confirm with metadata - Fixes...

dodaa08

### Description: File uploads fail with a 404 Not Found error when using EmbeddedChat with Rocket.Chat 8.x servers. The sendAttachment function uses the deprecated /api/v1/rooms.upload/:rid endpoint which was replaced in...

dodaa08