 Vladislav Kasperov
|
67b098dfd3
Add possibility to remove client email from sub (#4297)
|
vor 2 Tagen |
 MHSanaei
|
5543466fcc
fix(forms): validate JSON tabs before applying or saving
|
vor 2 Tagen |
|
MHSanaei
|
b10a9f1de7
fix(inbounds): hide node UI when no enabled node exists
|
vor 2 Tagen |
 Amirmohammad Sadat Shokouhi
|
4399fe2a85
add log rotate to 3xui.log file to avoid disk space consumption (#4277)
|
vor 2 Tagen |
|
MHSanaei
|
6c6b40e063
fix(outbound): accept JSON-only configs and sync JSON to basic form on tab switch
|
vor 2 Tagen |
|
MHSanaei
|
b97ff40ad6
feat(api-tokens): manage multiple named tokens; add tab/section anchor URLs
|
vor 2 Tagen |
|
MHSanaei
|
46b6f8c66c
feat(routing): drag-reorder rules, split balancer column, mobile card layout
|
vor 2 Tagen |
 Abdalrahman
|
102df7a290
style(api-docs): redesign TOC, section icons, endpoint rows, and code blocks with ultra-dark support (#4332)
|
vor 2 Tagen |
|
Abdalrahman
|
f29c8a5e29
fix: single inbound traffic reset resets all inbounds (#4334) (#4338)
|
vor 2 Tagen |
|
Abdalrahman
|
ad81649c16
fix: strip main-panel TLS cert file paths when sending inbound to remote node (#4339)
|
vor 2 Tagen |
|
Abdalrahman
|
b47f794ed0
fix: reality random target/sni buttons not working (#4337) (#4340)
|
vor 2 Tagen |
|
MHSanaei
|
4e1b597914
feat(ui): use the host as the browser tab title prefix
|
vor 2 Tagen |
|
MHSanaei
|
bbefe91011
fix(auth): invalidate sessions when 2FA is enabled, fix dev 401 loop
|
vor 2 Tagen |
|
MHSanaei
|
e40554a7d5
fix(inbound): require email when adding or updating a client
|
vor 2 Tagen |
|
MHSanaei
|
3569b1be73
ci(codeql): run on push to main
|
vor 2 Tagen |
|
MHSanaei
|
38da210ded
fix(security): SSRF-guard node and remote HTTP clients
|
vor 2 Tagen |
|
MHSanaei
|
9fc47b3d41
ci: gate workflows on relevant source paths
|
vor 2 Tagen |
|
MHSanaei
|
210c25cf13
Bump Go module dependency versions
|
vor 2 Tagen |
 dependabot[bot]
|
5dd7e44594
build(deps): bump golang.org/x/text from 0.36.0 to 0.37.0 (#4345)
|
vor 2 Tagen |
|
dependabot[bot]
|
4e4a8e9ff7
build(deps): bump golang.org/x/crypto from 0.50.0 to 0.51.0 (#4344)
|
vor 2 Tagen |
|
dependabot[bot]
|
23970e72a7
build(deps): bump golang.org/x/sys from 0.43.0 to 0.44.0 (#4343)
|
vor 2 Tagen |
|
dependabot[bot]
|
8bdb093d6e
build(deps): bump actions/setup-node from 5 to 6 (#4342)
|
vor 2 Tagen |
|
dependabot[bot]
|
3b0bcb910e
build(deps): bump actions/checkout from 5 to 6 (#4341)
|
vor 2 Tagen |
 Farhad H. P. Shirvan
|
428f1333ac
Security hardening: sessions, SSRF, CSP nonce, CSRF logout, trusted proxies (#4275)
|
vor 2 Tagen |
|
MHSanaei
|
406cb6dbc0
fix(api-docs): resolve no-useless-escape lint errors
|
vor 2 Tagen |
 Aleksandr
|
5fb36d34c9
fix(fail2ban): escape percent signs in 3x-ipl datepattern (#4328)
|
vor 2 Tagen |
|
Abdalrahman
|
4884a2972a
fix(graphs): increase y-axis paddingLeft from 32 to 56 to prevent clipped labels (#4309)
|
vor 2 Tagen |
|
Abdalrahman
|
6e12329d9d
feat(api-docs): enhance in-panel API documentation (#4312)
|
vor 2 Tagen |
|
Abdalrahman
|
9f7e8178d4
fix: delete button missing after searching for a user (#4315)
|
vor 2 Tagen |
|
Abdalrahman
|
60e6b12f4c
fix(hysteria2): restore missing masquerade config in inbound form (#4316)
|
vor 2 Tagen |
