MHSanaei 06cb1742a1 fix(server): bound the public-IP lookup and accept only an address ...

getPublicIP read a third-party IP echo service's body whole and cached
whatever came back as the panel's address, so one misbehaving service
could make the panel inflate an endless response at startup, and an
error page became the address shown in every status sample.

The read is capped at 64 bytes and only a parsable IP is accepted;
anything else counts as unavailable. The GitHub release lookups are
capped as well.

2026-11-01 13:18:01 +01:00

..

controller

fix(api): cap the client traffic list a master pushes by entry count

2026-10-31 14:25:21 +01:00

entity

feat(hosts): give a host a pool of SNIs, random per config or shared (#6923)

2026-10-24 21:05:42 +02:00

global

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

job

fix(ldap): keep expired and over-quota clients off on directory sync

2026-11-01 00:44:05 +01:00

locale

fix(i18n): publish the translation bundle only once it is complete

2026-10-31 09:11:54 +00:00

middleware

fix(web): bound the panel's open connections and share asset gzip

2026-11-01 01:01:38 +01:00

network

fix(web): bound the panel's open connections and share asset gzip

2026-11-01 01:01:38 +01:00

runtime

fix(node): count only values against the node-answer value cap

2026-11-01 13:14:46 +01:00

service

fix(server): bound the public-IP lookup and accept only an address

2026-11-01 13:18:01 +01:00

session

fix(web): start a fresh session at login

2026-10-31 09:05:28 +00:00

translation

feat(tls): cipher suite presets and a uTLS fingerprint warning

2026-10-25 15:54:48 +01:00

websocket

fix(tuic): client speed display and certificate button layout (#6723)

2026-10-05 19:46:46 +02:00

assets_test.go

fix(web): bound the panel's open connections and share asset gzip

2026-11-01 01:01:38 +01:00

cadence_test.go

Add remote routing URL support (#6168)

2026-08-18 16:02:11 +02:00

node_contract_test.go

fix(node): drop a swept inbound's bookkeeping from the node runtime

2026-10-31 09:28:39 +00:00

routes_contract_test.go

fix(web): bound the panel's open connections and share asset gzip

2026-11-01 01:01:38 +01:00

schedule_test.go

fix(settings): accept five-field crontab for report and LDAP schedules

2026-10-11 20:37:04 +02:00

web_mtls_test.go

feat(node): node hardening — mTLS, hashed+zstd reconcile transport, per-node net metrics (#5382)

2026-06-16 12:19:33 +02:00

web_mtls.go

feat(node): node hardening — mTLS, hashed+zstd reconcile transport, per-node net metrics (#5382)

2026-06-16 12:19:33 +02:00

web_shutdown_test.go

fix(web): install the share-link provider before the panel serves (#6914)

2026-10-24 05:50:46 +02:00

web_sublink_test.go

fix(web): install the share-link provider before the panel serves (#6914)

2026-10-24 05:50:46 +02:00

web_tuic_shutdown_test.go

fix(web): install the share-link provider before the panel serves (#6914)

2026-10-24 05:50:46 +02:00

web.go

fix(web): bound the panel's open connections and share asset gzip

2026-11-01 01:01:38 +01:00