pjandro/3x-ui
1
0
Fork 0
mirror of https://github.com/MHSanaei/3x-ui.git synced 2026-10-16 19:05:13 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix(sponsor): fetch sponsor data from raw.githubusercontent.com

Browse Source 
The server-side fetch used sponsors.sanaei.dev, a hostname unique to
3x-ui. Without ECH it travels in plaintext SNI, so an on-path observer
could tag a server as running the panel from that one connection.
raw.githubusercontent.com is shared by countless tools and reveals
nothing. The path stays inside TLS. The data source is unchanged: the
same MHSanaei/sponsors repo.

Refs #6824
This commit is contained in:
MHSanaei
2026-10-14 17:10:02 +02:00
parent b177b98ce8
commit 35b5e0989a
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
internal/web/service/panel/sponsor.go
+2 -2
View File
@@ -60,8 +60,8 @@ type sponsorLogo struct {
} }
var ( var (
sponsorsURL = "https://sponsors.sanaei.dev/3X/sponsors.json" sponsorsURL = "https://raw.githubusercontent.com/MHSanaei/sponsors/refs/heads/main/3X/sponsors.json"
sponsorLogoBase = "https://sponsors.sanaei.dev/3X/logos/" sponsorLogoBase = "https://raw.githubusercontent.com/MHSanaei/sponsors/refs/heads/main/3X/logos/"
sponsorNow = time.Now sponsorNow = time.Now
// The panel proxies logos from sponsorLogoBase: CSP stays 'self' and no third party sees admin IPs. // The panel proxies logos from sponsorLogoBase: CSP stays 'self' and no third party sees admin IPs.