Commit Graph

  • 38da210ded fix(security): SSRF-guard node and remote HTTP clients MHSanaei 2026-05-13 13:33:53 +02:00
  • 9fc47b3d41 ci: gate workflows on relevant source paths MHSanaei 2026-05-13 13:21:26 +02:00
  • 210c25cf13 Bump Go module dependency versions MHSanaei 2026-05-13 13:04:44 +02:00
  • 5dd7e44594 build(deps): bump golang.org/x/text from 0.36.0 to 0.37.0 (#4345) dependabot[bot] 2026-05-13 13:00:02 +02:00
  • 4e4a8e9ff7 build(deps): bump golang.org/x/crypto from 0.50.0 to 0.51.0 (#4344) dependabot[bot] 2026-05-13 12:58:42 +02:00
  • 23970e72a7 build(deps): bump golang.org/x/sys from 0.43.0 to 0.44.0 (#4343) dependabot[bot] 2026-05-13 12:57:07 +02:00
  • 8bdb093d6e build(deps): bump actions/setup-node from 5 to 6 (#4342) dependabot[bot] 2026-05-13 12:56:51 +02:00
  • 3b0bcb910e build(deps): bump actions/checkout from 5 to 6 (#4341) dependabot[bot] 2026-05-13 12:56:08 +02:00
  • 428f1333ac Security hardening: sessions, SSRF, CSP nonce, CSRF logout, trusted proxies (#4275) Farhad H. P. Shirvan 2026-05-13 12:52:52 +02:00
  • 406cb6dbc0 fix(api-docs): resolve no-useless-escape lint errors MHSanaei 2026-05-13 11:31:34 +02:00
  • 5fb36d34c9 fix(fail2ban): escape percent signs in 3x-ipl datepattern (#4328) Aleksandr 2026-05-13 02:49:09 +03:00
  • 4884a2972a fix(graphs): increase y-axis paddingLeft from 32 to 56 to prevent clipped labels (#4309) Abdalrahman 2026-05-13 02:47:54 +03:00
  • 6e12329d9d feat(api-docs): enhance in-panel API documentation (#4312) Abdalrahman 2026-05-13 02:47:09 +03:00
  • 9f7e8178d4 fix: delete button missing after searching for a user (#4315) Abdalrahman 2026-05-13 02:27:10 +03:00
  • 60e6b12f4c fix(hysteria2): restore missing masquerade config in inbound form (#4316) Abdalrahman 2026-05-13 02:25:00 +03:00
  • 0dbadf82c0 fix: auto-renew must re-enable client in inbound settings JSON (#4317) Abdalrahman 2026-05-13 02:15:52 +03:00
  • 48e90bba51 fix: show UDP tag for Hysteria and fix client count spacing (#4318) Abdalrahman 2026-05-13 02:12:25 +03:00
  • 6de9b24229 fix: preserve space between date and time in log modal (#4326) Abdalrahman 2026-05-13 02:02:48 +03:00
  • 07bc74a521 feat(nodes): blur address column with eye-toggle, mirroring IndexPage IP card MHSanaei 2026-05-12 12:38:38 +02:00
  • f570b991e7 fix(api-docs): copy API token button MHSanaei 2026-05-12 12:34:22 +02:00
  • 80031e67cc feat(inbounds): restore copy-clients-between-inbounds modal MHSanaei 2026-05-12 12:30:07 +02:00
  • fdaa65ad7e Feat: clarify VLESS encryption auth selection (#4271) Farhad H. P. Shirvan 2026-05-12 11:39:28 +02:00
  • d86e87ed30 Fix: traffic writer restart freeze (#4265) Farhad H. P. Shirvan 2026-05-12 11:36:05 +02:00
  • 89a8f549f2 feat: sortable inbounds table columns (#4300) Abdalrahman 2026-05-12 12:29:32 +03:00
  • 355bb4c9c0 feat(panel): xray metrics dashboard with observatory probe history MHSanaei 2026-05-12 02:17:45 +02:00
  • 9feeccffc0 fix(node): normalize base path during probe so missing trailing slash doesn't break status checks MHSanaei 2026-05-12 00:27:49 +02:00
  • cb962175c2 update translation MHSanaei 2026-05-11 20:47:49 +02:00
  • 8f3202f431 fix(traffic-writer): replace sync.Once with Start/Stop cycle so SIGHUP restart works v3.0.1 MHSanaei 2026-05-11 16:01:04 +02:00
  • 0cb6568fd5 v3.0.1 MHSanaei 2026-05-11 15:05:09 +02:00
  • 6a90f98412 feat(inbounds): add sub/client link endpoints; hide panel version on login MHSanaei 2026-05-11 15:03:47 +02:00
  • 9318c2105f fix(xray): implement graceful shutdown for xray process and add tests (#4259) Farhad H. P. Shirvan 2026-05-11 14:11:40 +02:00
  • e642f7324e feat(panel): in-panel API documentation page MHSanaei 2026-05-11 13:57:42 +02:00
  • 7214ffafc5 fix(inbounds): scope port check to node and preserve caller tag MHSanaei 2026-05-11 12:51:45 +02:00
  • 88061bac10 fix(theme): default to dark, polish theme cycle visibility and hover MHSanaei 2026-05-11 12:51:17 +02:00
  • b5479f3f30 feat(sidebar): pin Logout above trigger, inline 3-state theme cycle MHSanaei 2026-05-11 11:50:40 +02:00
  • d8aedcdde4 fix(inbounds): bulk-delete keeps last client to satisfy backend constraint MHSanaei 2026-05-11 10:22:52 +02:00
  • 5f3e9ed0ea feat(xray/nord): searchable server list + colored load tag, surface API errors MHSanaei 2026-05-11 10:06:01 +02:00
  • 3e8a0eb93e fix(inbounds): paginate expanded client list, restore ID column, hide empty Remark MHSanaei 2026-05-11 09:05:47 +02:00
  • 4c2915586c fix(alpine): restart_xray uses rc-service; OpenRC reload reads pidfile contents MHSanaei 2026-05-11 09:05:36 +02:00
  • 9f06bffbea chore: fix remarks shadowrocket subscription (#4247) Harry NG 2026-05-11 13:24:22 +07:00
  • e20d73ba7e add loopback and dns servers tag to inbound lists in RuleFormModal (#4244) Amirmohammad Sadat Shokouhi 2026-05-11 09:53:30 +03:30
  • 8834e5fbbe feat(xray/outbounds): TCP probe mode + Test All + timing breakdown MHSanaei 2026-05-11 04:17:23 +02:00
  • 6d732d8d32 feat(inbounds): bulk-select clients + UX polish MHSanaei 2026-05-11 03:50:28 +02:00
  • e4900f1bd4 feat(install): add skip-SSL option for reverse-proxy / SSH-tunnel setups MHSanaei 2026-05-11 02:46:47 +02:00
  • 04828246fc feat(frontend): swap QRious for ant-design-vue's a-qrcode MHSanaei 2026-05-11 01:58:27 +02:00
  • c1efc48694 feat(frontend): refresh dark theme + redesign login page MHSanaei 2026-05-11 01:10:05 +02:00
  • f1760b0a28 feat(xray/balancer): restore observatory editor + auto-sync selectors MHSanaei 2026-05-11 00:11:09 +02:00
  • 745e394c74 refactor(panel): rename injected globals + collapse QR modal entries MHSanaei 2026-05-10 23:40:39 +02:00
  • 737300b14b fix(outbound): default VLESS encryption to "none" MHSanaei 2026-05-10 23:06:28 +02:00
  • 30469fcd10 fix: backup path with webbasepath (#4223) GRCR13 2026-05-10 23:48:35 +03:00
  • 887fca86ec fix(fail2ban): escape % in 3x-ipl action date format (#4218) MHSanaei 2026-05-10 19:26:21 +02:00
  • 6efc4b0665 Revert "perf(frontend): code-split heavy components to improve LCP" v3.0.0 MHSanaei 2026-05-10 17:45:05 +02:00
  • 94a7dbfe3c fix(docker): pin frontend stage to BUILDPLATFORM and drop removed buildx input MHSanaei 2026-05-10 17:22:15 +02:00
  • e2649f98df fix(arch): correct x-ui service path (#4213) qwardo 2026-05-10 18:17:33 +03:00
  • 3d839e0ee1 v3.0.0 MHSanaei 2026-05-10 17:15:48 +02:00
  • a96612f595 feat(xray/dns): align DNS settings with Xray docs + UI polish MHSanaei 2026-05-10 17:03:11 +02:00
  • 8e7d215b4a feat(nodes): traffic-writer queue, full-mirror sync, WS event fixes MHSanaei 2026-05-10 16:25:23 +02:00
  • 24cd271486 Fix overly permissive file permissions (os.ModePerm) (#4207) Qiaochu Hu 2026-05-10 20:47:28 +08:00
  • dee2525d5f Fix silently ignored errors in password migration seeder (#4206) Qiaochu Hu 2026-05-10 20:46:42 +08:00
  • 81b4ae5661 Fix silently ignored error when saving outbound test URL setting (#4209) Qiaochu Hu 2026-05-10 20:45:53 +08:00
  • 9cbba130ab fix(xray): clear outbound test state on delete to prevent result bleed (#4205) Ali Fotouhi 2026-05-10 13:33:00 +03:30
  • cf5767acd1 i18n: localize sidebar theme toggle, xray-status badge, and nodes menu MHSanaei 2026-05-10 11:55:37 +02:00
  • 444b05cac9 perf(frontend): code-split heavy components to improve LCP MHSanaei 2026-05-10 11:33:46 +02:00
  • f70e131dfe fix(nodes): bind form-encoded posts and skip node inbounds in central xray MHSanaei 2026-05-10 11:32:06 +02:00
  • 14165fc54d avoid reset in QueryStatsRequest (#4202) Amirmohammad Sadat Shokouhi 2026-05-10 12:29:42 +03:30
  • 7cd26a0583 v3 MHSanaei 2026-05-10 02:13:42 +02:00
  • 267fb1c866 refactor(inbounds): reorder Inbound's Data tabs (client first, sub inline) MHSanaei 2026-05-10 01:59:02 +02:00
  • 5ac88271af feat(inbounds): mobile card layout for inbounds and clients MHSanaei 2026-05-10 01:46:48 +02:00
  • b776b33497 fix(ui): correct responsive breakpoints for add client form and bulk MHSanaei 2026-05-10 00:52:22 +02:00
  • 1478124712 fix(ui): correct responsive breakpoints for inbound form and settings MHSanaei 2026-05-10 00:43:25 +02:00
  • 9735d26b3d perf(xray): bound Xray-version request and extend cache MHSanaei 2026-05-10 00:24:25 +02:00
  • 113a29733e feat(logs): mobile-friendly log modals with theme-aware colors MHSanaei 2026-05-10 00:13:20 +02:00
  • 3505430e57 fix(docker): include web/translation in frontend and final stages MHSanaei 2026-05-09 23:30:54 +02:00
  • f68a14a3ca fix(xray): align DNS outbound to spec and repair item-list rules UI MHSanaei 2026-05-09 23:17:31 +02:00
  • 60e2af088d feat(xray): add loopback outbound protocol MHSanaei 2026-05-09 22:49:49 +02:00
  • 917f9b307e fix(xray): surface reverse tags in routing and balancer dropdowns MHSanaei 2026-05-09 22:03:01 +02:00
  • 61c84e8223 fix(panel): make webBasePath work end-to-end in dev and prod MHSanaei 2026-05-09 21:47:37 +02:00
  • 72d8ebd269 fix(x-ui.sh): pass silent flag to stop/start during IP SSL setup MHSanaei 2026-05-09 19:59:01 +02:00
  • b885a1f8a6 fix(index): improve mobile dashboard layout MHSanaei 2026-05-09 19:03:09 +02:00
  • 439f4cf1e8 Build frontend for CodeQL; remove release analyze job MHSanaei 2026-05-09 17:56:16 +02:00
  • bc00d37ad8 Vue3 migration (#4198) Sanaei 2026-05-09 17:38:48 +02:00
  • 12c10dbd98 feat(custom-geo): refresh index UI MHSanaei 2026-05-08 10:09:33 +02:00
  • 2fd2cd0af1 fix(panel): silence update-check WARN spam when offline MHSanaei 2026-05-08 09:51:05 +02:00
  • 37fb48ffff Axios v1.16.0 MHSanaei 2026-05-08 09:41:56 +02:00
  • d8198f543b fix(warp): harden API client and frontend, bump to v0a4005 MHSanaei 2026-05-08 09:29:42 +02:00
  • f2bc4938b7 Reality: remove tesla.com because of blocking MHSanaei 2026-05-08 00:59:09 +02:00
  • 7f703f927e fix(scripts): harden server-IP detection with multi-provider + manual fallback MHSanaei 2026-05-08 00:51:28 +02:00
  • f2c79b57fa Bump Go to 1.26.3 MHSanaei 2026-05-08 00:19:05 +02:00
  • c394938f01 refactor(websocket): split controller into service + thin controller MHSanaei 2026-05-08 00:00:44 +02:00
  • b84b58ef21 fix(websocket): guard stale events and disconnect race in JS client MHSanaei 2026-05-08 00:00:10 +02:00
  • 10ebc6cbdc Implement CSRF protection and security hardening across the application (#4179) Farhad H. P. Shirvan 2026-05-07 23:36:11 +02:00
  • a1b2382877 chore: fix shadowrocketUrl client (#4183) Harry NG 2026-05-08 01:59:10 +07:00
  • 59c55dfc92 fix(panel-update): poll for restart, fix dark-mode version label MHSanaei 2026-05-07 20:55:22 +02:00
  • 28a3dddb60 refactor(fallbacks): share template, tighter UX, cleaner JSON MHSanaei 2026-05-07 20:27:34 +02:00
  • 39bf31bd56 fix(tun): use single mtu number per Xray spec MHSanaei 2026-05-07 19:50:47 +02:00
  • 42b2ebc00b refactor(xhttp): split fields by direction, expand outbound coverage MHSanaei 2026-05-07 19:26:40 +02:00
  • 3b64a62137 refactor(vless): drop selectedAuth, expose two explicit auth buttons MHSanaei 2026-05-07 15:08:06 +02:00
  • 79a7e7a5b5 fix(vless): scope testseed to xtls-rprx-vision flow MHSanaei 2026-05-07 14:44:33 +02:00
  • 3349dcbc13 fix(fail2ban): fix banning regression and Docker zero-jail issue MHSanaei 2026-05-07 13:53:34 +02:00
  • ad30298700 Exclude virtual interfaces from network stats MHSanaei 2026-05-06 17:28:41 +02:00