 MHSanaei
|
bbefe91011
fix(auth): invalidate sessions when 2FA is enabled, fix dev 401 loop
|
1 day ago |
|
MHSanaei
|
e40554a7d5
fix(inbound): require email when adding or updating a client
|
1 day ago |
|
MHSanaei
|
3569b1be73
ci(codeql): run on push to main
|
1 day ago |
|
MHSanaei
|
38da210ded
fix(security): SSRF-guard node and remote HTTP clients
|
1 day ago |
|
MHSanaei
|
9fc47b3d41
ci: gate workflows on relevant source paths
|
1 day ago |
|
MHSanaei
|
210c25cf13
Bump Go module dependency versions
|
1 day ago |
 dependabot[bot]
|
5dd7e44594
build(deps): bump golang.org/x/text from 0.36.0 to 0.37.0 (#4345)
|
1 day ago |
|
dependabot[bot]
|
4e4a8e9ff7
build(deps): bump golang.org/x/crypto from 0.50.0 to 0.51.0 (#4344)
|
1 day ago |
|
dependabot[bot]
|
23970e72a7
build(deps): bump golang.org/x/sys from 0.43.0 to 0.44.0 (#4343)
|
1 day ago |
|
dependabot[bot]
|
8bdb093d6e
build(deps): bump actions/setup-node from 5 to 6 (#4342)
|
1 day ago |
|
dependabot[bot]
|
3b0bcb910e
build(deps): bump actions/checkout from 5 to 6 (#4341)
|
1 day ago |
 Farhad H. P. Shirvan
|
428f1333ac
Security hardening: sessions, SSRF, CSP nonce, CSRF logout, trusted proxies (#4275)
|
1 day ago |
|
MHSanaei
|
406cb6dbc0
fix(api-docs): resolve no-useless-escape lint errors
|
1 day ago |
 Aleksandr
|
5fb36d34c9
fix(fail2ban): escape percent signs in 3x-ipl datepattern (#4328)
|
2 days ago |
 Abdalrahman
|
4884a2972a
fix(graphs): increase y-axis paddingLeft from 32 to 56 to prevent clipped labels (#4309)
|
2 days ago |
|
Abdalrahman
|
6e12329d9d
feat(api-docs): enhance in-panel API documentation (#4312)
|
2 days ago |
|
Abdalrahman
|
9f7e8178d4
fix: delete button missing after searching for a user (#4315)
|
2 days ago |
|
Abdalrahman
|
60e6b12f4c
fix(hysteria2): restore missing masquerade config in inbound form (#4316)
|
2 days ago |
|
Abdalrahman
|
0dbadf82c0
fix: auto-renew must re-enable client in inbound settings JSON (#4317)
|
2 days ago |
|
Abdalrahman
|
48e90bba51
fix: show UDP tag for Hysteria and fix client count spacing (#4318)
|
2 days ago |
|
Abdalrahman
|
6de9b24229
fix: preserve space between date and time in log modal (#4326)
|
2 days ago |
|
MHSanaei
|
07bc74a521
feat(nodes): blur address column with eye-toggle, mirroring IndexPage IP card
|
2 days ago |
|
MHSanaei
|
f570b991e7
fix(api-docs): copy API token button
|
2 days ago |
|
MHSanaei
|
80031e67cc
feat(inbounds): restore copy-clients-between-inbounds modal
|
2 days ago |
|
Farhad H. P. Shirvan
|
fdaa65ad7e
Feat: clarify VLESS encryption auth selection (#4271)
|
2 days ago |
|
Farhad H. P. Shirvan
|
d86e87ed30
Fix: traffic writer restart freeze (#4265)
|
2 days ago |
|
Abdalrahman
|
89a8f549f2
feat: sortable inbounds table columns (#4300)
|
2 days ago |
|
MHSanaei
|
355bb4c9c0
feat(panel): xray metrics dashboard with observatory probe history
|
3 days ago |
|
MHSanaei
|
9feeccffc0
fix(node): normalize base path during probe so missing trailing slash doesn't break status checks
|
3 days ago |
|
MHSanaei
|
cb962175c2
update translation
|
3 days ago |
