WordPress.org
Get WordPress

Plugin Directory

Changeset 3496593


Ignore:
Timestamp:
04/01/2026 01:01:45 PM (37 hours ago)
Author:
boxedchat
Message:

Improved OAuth authentication flow

Location:
boxedchat-chat-widget/trunk
Files:
2 edited

Legend:

Unmodified
Added
Removed

  • boxedchat-chat-widget/trunk/README.txt

    r3496550 r3496593  
    55Tested up to: 6.9
    66Requires PHP: 7.4
    7 Stable tag: 1.2.3
     7Stable tag: 1.2.4
    88License: GPL v2 or later
    99License URI: https://www.gnu.org/licenses/gpl-2.0.html
    … …  
    7979== Changelog ==
    8080
     81= 1.2.4 =
     82- Improved OAuth authentication flow
     83
    8184= 1.2.3 =
    8285- Improved security with API key management

  • boxedchat-chat-widget/trunk/boxedchat-chat-widget.php

    r3496550 r3496593  
    33 * Plugin Name: BoxedChat – AI Chat Widget & Support & Helpdesk
    44 * Description: Add a free live chat widget to your website in minutes. Talk to visitors, capture leads, and support customers with Boxed.chat.
    5  * Version: 1.2.3
     5 * Version: 1.2.4
    66 * Author: boxedchat
    77 * Author URI: https://boxed.chat
    … …  
    4848    ), $boxchat_app_url . '/auth/wp-plugin');
    4949
    50     add_filter('allowed_redirect_hosts', function( $hosts ) {
    51       $hosts[] = 'boxed.chat';
    52       return $hosts;
    53     });
    54 
    55     wp_safe_redirect(esc_url_raw($auth_url), 302, 'BoxedChat');
     50
     51    // Use wp_redirect (not wp_safe_redirect) because the destination is always
     52    // boxed.chat — our own server. wp_safe_redirect falls back to admin_url()
     53    // when the external host isn't whitelisted, which causes the redirect to
     54    // land on the WP dashboard instead of BoxedChat.
     55    wp_redirect(esc_url_raw($auth_url), 302);
    5656    exit;
    5757  }
Note: See TracChangeset for help on using the changeset viewer.