Back
Karlon Davis
Karlon Davis
@karlondavis
Founder & product builder, focused on building useful, durable products.
davidmassiani.com
davidmassiani.com
Load previous page…
Secured all public chat API endpoints (start, messages.get, messages.post) with Origin/Referer header validation against allowed domains. 
#lopodesk
Built domain validation utility with wildcard support - *.example.com now matches all subdomains including base domain. #lopodesk
Added chat_allowed_domains TEXT[] column to crm_workspaces table for storing allowed domain patterns per workspace. #lopodesk
Identified security concern with chat widget - anyone with chat code could embed it on unauthorized domains. Planning domain whitelisting feature. #lopodesk
Designed a new favicon for Lopodesk - geometric "LD" letters with cyan-to-purple gradient on dark background. SVG format for crisp rendering at any size. #lopodesk
Added embeddable chat widget with security hardening (XSS, CSS injection, rate limiting, input validation) #lopodesk