4.61v Security fixes

Multiple XSS vulnerabilities were fixed (all required operator login to exploit)

These were minor security issues that couldn't be exploited by anonymous visitors

Reported by:

* Name: Manojkumar Jaganathan (TheWhiteEvil)
* LinkedIn: https://www.linkedin.com/in/manojkumar-j-7ba35b202/
* HackerOne Profile: https://hackerone.com/the-white-evil?type=user
* Company: HackerBro Technologies
* Their website https://www.hackerbro.net

Specific fixes included:
    1. Properly escaping operator names in the dropdown filtering box
    2. Escaping bot usernames in the Telegram module
    3. Escaping operator names in the change owner window
    4. Escaping "Alias nick" field in department assignment modals
    5. Escaping Facebook page "Name" fields
    6. Escaping canned message content in chat window flows
New Features
    1. Added logging capability for chat priority rules application
    2. Added support for passing chat_id and chat_hash parameters
    3. Improved UI to show which siteaccess is being used for translated text in widget themes

For update just follow standard update procedure. For manual update it's update_329.sql

4.60v Improvements

1. Disabled operators departments relations will be stored in separate table. Performance improvement.
2. `Ignore message in Rest API` option in text message. Will avoid message being send inside `previous_visitor_messages_list_url` loop.
3. Option in chat configuration `Delete chat on close there there is no visitor messages in chat` usefull in case you are using auto chat start in start chat form settings.
4.  `sensitive`, `raw`, `sensitive_raw` prefixes support for `sensitive_{{args.item.msg}}` syntax inside `previous_visitor_messages_list_url` loop
5. Encrypted variables passing additional options https://doc.livehelperchat.com/docs/custom-fields-and-prefill#how-securely-pass-attributes
6. JS api to hide need help widget manually. https://doc.livehelperchat.com/docs/javascript-arguments#hide-need-help-widget
7. Update script to support migration queries.

For update just follow standard update procedure. For manual update it's update_328.sql

4.59v Improvements

1. Fixed an issue where the assigned operator's statistics were not updated if the chat was auto-assigned but handled by another operator.
2. Optimized database indexing for the online operators widget, improving data fetching speed by 40–50%.
3. Browser notifications now display unread messages instead of just indicating the assigned chat.
4. Improved clarity of explanations in mobile settings.
5. Added support for canned messages in the mobile app.
6. Implemented a workaround for a Chrome bug: Chromium issue 414284085.
7. Added the option to display a custom message for connection issues.
8. Fixed an issue where the widget, when set to embed mode with a popup-on-click action, failed to render. This now properly handles misconfigurations.
9. The foreach loop in REST API calls now supports a {skip_empty_msg} option to ignore empty messages.
10. The dropdown search component now aborts previous API calls when a new one is made.
11. Migrated browser confirm dialogs to modal-based dialogs to resolve a Safari issue where confirm and submit actions were not handled correctly.
12. Improved user experience when scrolling to previous messages.
13. Fixed an issue causing double replacements in bot trigger texts.
14. Added an option to crop visitor-uploaded images to a square in file upload settings.
15. Option in chat list search by chat close time.
16. `lh_transfer` table was not cleaned up in some scenarios.
17. Various minor improvements throughout the system.

For update just follow standard update procedure. For manual update it's update_327.sql

4.58v Exclude permission type

• In some cases open action was not logged for chats.
• Module function can be assigned as `Exclude` type. Allows scenarios then operator has permission to all module functions, but excludes some.
• Replaceable variables available in Rest API now also. {{replaceable.<identifier>}}
• Option to control after how many characters new row appears in the widget. Widget theme.
• Bot individual trigger action can be checked against conditions. Allows easier migration of live bot.
• `Login as` was fixed.

For update just follow standard update procedure. For manual update it's update_326.sql

4.57v Operators notifications

• Link to chat was not activating chat tab on first open.
• Push notifications based browser notifications. You can receive notifications even if back office is closed.
• Rest API for mail conversations and chat Rest API will support search by department identifier.
• Option to log operator actions (chat open/preview...) in audit log.
• Bunch of other small fixes...

For update just follow standard update procedure. For manual update it's update_325.sql