webwhiz

webwhiz copied to clipboard

ERR_OSSL_EVP_UNSUPPORTED

1

# Problem When setting up frontend after running npm run start the error below shows afer starting the development server # Error ```bash Error: error:0308010C:digital envelope routines::unsupported at new Hash...

Wladefant

Limit max-old-space-size to avoid allocation failure

1

I had to limit the max-old-space-size to build. I was getting this error. ``` FATAL ERROR: Reached heap limit Allocation failed - JavaScript heap out of memory ``` It can...

runephilosof-abtion

Hello, As the title of this issue suggests, would it be possible to make the rebranding of WebWhiz easier ? For instance having the following functionalities would make the rebranding...

MohamedAmineDHIAB

Lost background tasks. Creation of chatbot fails when multiple chatbots are created at the same time.

2

I have started by creating 4 chatbots simultaneously using different configurations. BUG: Unexpected Failed Chatbot Creation without logs: All chatbots were created successfully except for one that is still loading...

zypriafl

Set widget BASE_TARGET on ENV variables

3

It should be possible to decide where the widget's links should be open. The PR makes it possible to set an ENV variable at build time to open the links...

hcarreras

Apart from separating concerns. This also has the benefit of making it possible to add a secure csp without `script-src unsafe-inline`

runephilosof-abtion

Widget nginx: More Content-Security-Policy header

1

Improves on #225 (PR set as draft, to wait for the other PR to be merged) Restrict the hosts that the widget is allowed to contact. Also, set stylesheet from...

runephilosof-abtion

https://infosec.mozilla.org/guidelines/web_security#x-content-type-options > all sites must set the X-Content-Type-Options header and the appropriate MIME types for files that they serve.

runephilosof-abtion

https://github.com/expressjs/cors?tab=readme-ov-file#configuring-cors-w-dynamic-origin

runephilosof-abtion

Limit allowed `frame-ancestors` using CSP

1

Unset it or set it to `http: https:` to keep the previous behavior. For self-hosting you would probably want to set it to `https://your.domain`.

runephilosof-abtion