3x-ui

mirror of https://github.com/MHSanaei/3x-ui.git synced 2026-11-02 11:15:03 +03:00

Files

T

MHSanaei 2467b9d542 fix(sub): bound what one subscription response renders

A subscription's size is the product of its clients and inbounds with
each one's remark and endpoints, and nothing bounded that product: data
adopted from a node could make one unauthenticated request render
gigabytes and run the panel out of memory.

Each request now carries an 8 MiB budget that the raw, JSON and Clash
outputs charge as they materialize a client's links, configs or
proxies. Rendering stops once it is spent, with one warning, and
anything below the budget is unchanged.

2026-11-01 01:15:28 +01:00

build_urls_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

calendar_expire_test.go

feat(sub): add opt-in month-end expiry presentation (#6517 )

2026-09-14 12:10:25 +02:00

calendar_expire.go

feat(sub): add opt-in month-end expiry presentation (#6517 )

2026-09-14 12:10:25 +02:00

characterization_test.go

fix(sub): restore client email in panel copy/QR link remark (#5532 )

2026-06-24 15:25:41 +02:00

clash_external_quota_test.go

feat(sub): map shadowsocks TCP HTTP headers to Mihomo's obfs plugin (#6838 )

2026-10-24 07:10:30 +02:00

clash_external_shadowsocks_test.go

feat(sub): map shadowsocks TCP HTTP headers to Mihomo's obfs plugin (#6838 )

2026-10-24 07:10:30 +02:00

clash_external_vless_test.go

feat(sub): opt-in dns and sniffer from remote Clash rules (#6868 )

2026-10-24 04:21:04 +02:00

clash_external.go

fix(sub): preserve external VLESS encryption in Clash subscriptions (#6576 )

2026-09-26 20:31:50 +02:00

clash_info_node_test.go

feat(sub): opt-in dns and sniffer from remote Clash rules (#6868 )

2026-10-24 04:21:04 +02:00

clash_remote_dns_test.go

feat(sub): opt-in dns and sniffer from remote Clash rules (#6868 )

2026-10-24 04:21:04 +02:00

clash_service_test.go

feat(sub): map shadowsocks TCP HTTP headers to Mihomo's obfs plugin (#6838 )

2026-10-24 07:10:30 +02:00

clash_service.go

fix(sub): bound what one subscription response renders

2026-11-01 01:15:28 +01:00

clash_yaml_test.go

fix(sub): keep every Clash scalar on its own line

2026-10-31 08:56:24 +00:00

clash_yaml.go

fix(sub): keep every Clash scalar on its own line

2026-10-31 08:56:24 +00:00

controller_test.go

fix(sub): send no-store on every subscription route (#6862 )

2026-10-24 06:08:02 +02:00

controller.go

perf(sub): cache each inbound's settings without clients for subscription bodies (#6758 )

2026-10-24 22:45:46 +02:00

default_json_test.go

fix(sub): drop legacy freedom.domainStrategy from JSON sub template (#6609 )

2026-09-26 21:13:39 +02:00

default.json

fix(sub): drop legacy freedom.domainStrategy from JSON sub template (#6609 )

2026-09-26 21:13:39 +02:00

dist.go

feat(sub): add raw subscription download actions (#6017 )

2026-07-21 15:52:33 +02:00

endpoint_test.go

fix(sub): encode the link host and the VLESS id in share links

2026-11-01 00:10:23 +01:00

endpoint.go

fix(sub): carry REALITY ML-KEM hint in VLESS links (#6712 )

2026-10-02 15:44:41 +02:00

export_all_links_test.go

fix(inbounds): serve fresh client UUIDs for list and allLinks (#6458 )

2026-09-12 11:12:13 +02:00

external_config_test.go

fix(sub): treat external subscription providers as untrusted input

2026-10-31 08:53:27 +00:00

external_config.go

fix(sub): resolve a blank subId to no subscription

2026-11-01 00:57:32 +01:00

external_hwid_test.go

fix(sub): treat external subscription providers as untrusted input

2026-10-31 08:53:27 +00:00

external_only_sub_test.go

feat(sub): opt-in dns and sniffer from remote Clash rules (#6868 )

2026-10-24 04:21:04 +02:00

external_remark_test.go

fix(sub): keep serverDescription literal in external link fragments (#6580 )

2026-09-26 22:00:09 +02:00

external_subscription_test.go

fix(sub): treat external subscription providers as untrusted input

2026-10-31 08:53:27 +00:00

external_subscription.go

fix(sub): treat external subscription providers as untrusted input

2026-10-31 08:53:27 +00:00

forwarded_trust_test.go

fix(sub): never use X-Real-IP as the subscription host (#6608 )

2026-09-26 21:13:46 +02:00

forwarded_trust.go

fix(sub): honor trustedProxyCIDRs before forwarded URLs (#6135 )

2026-07-29 21:01:59 +02:00

happ_test.go

fix(sub): make Happ require auth on its local SOCKS/HTTP proxy (#6628 )

2026-09-26 22:03:20 +02:00

happ.go

fix(sub): make Happ require auth on its local SOCKS/HTTP proxy (#6628 )

2026-09-26 22:03:20 +02:00

host_cidr_test.go

feat(sub): generate random IPs from CIDR host addresses (#6784 )

2026-10-24 05:13:44 +02:00

host_cidr.go

feat(sub): generate random IPs from CIDR host addresses (#6784 )

2026-10-24 05:13:44 +02:00

host_order_test.go

fix(sub): close a deleted host binding only on the inbound it served

2026-10-24 20:07:55 +02:00

host_order.go

feat(hosts): give a host a pool of SNIs, random per config or shared (#6923 )

2026-10-24 21:05:42 +02:00

host_sub_test.go

fix(sub): look up a socket child's fallback front on the child's own host

2026-11-01 00:21:03 +01:00

host_sub.go

feat(hosts): give a host a pool of SNIs, random per config or shared (#6923 )

2026-10-24 21:05:42 +02:00

hwid_controller_test.go

fix(hwid): track devices only for subscriptions a client owns

2026-11-01 00:54:59 +01:00

hysteria_geco_uri_test.go

fix(sub): export Hysteria2 Gecko obfs in Clash/Mihomo subscriptions

2026-10-14 14:42:00 +02:00

hysteria_server_description_test.go

fix(sub): append host serverDescription to hysteria links (#6740 )

2026-10-05 19:05:13 +02:00

inactive_external_sub_test.go

fix(sub): resolve a blank subId to no subscription

2026-11-01 00:57:32 +01:00

incy_test.go

feat(sub): add Incy app-management parameters (#6650 )

2026-09-27 01:06:17 +02:00

incy.go

feat(sub): add Incy app-management parameters (#6650 )

2026-09-27 01:06:17 +02:00

info_endpoint_test.go

feat(sub): redesign the subscription page around usage, tabs and app imports

2026-09-16 01:55:56 +02:00

json_dns_controller_test.go

feat(sub): let the panel set the JSON subscription DNS servers (#6485 )

2026-09-13 11:51:56 +02:00

json_dns_test.go

feat(sub): let the panel set the JSON subscription DNS servers (#6485 )

2026-09-13 11:51:56 +02:00

json_dns.go

feat(sub): let the panel set the JSON subscription DNS servers (#6485 )

2026-09-13 11:51:56 +02:00

json_flow_gate_test.go

feat(sub): opt-in dns and sniffer from remote Clash rules (#6868 )

2026-10-24 04:21:04 +02:00

json_info_node_test.go

feat(sub): bake Happ/INCY routing profiles into the JSON subscription (#6402 )

2026-09-10 17:05:54 +02:00

json_routing_baked_test.go

feat(sub): bake Happ/INCY routing profiles into the JSON subscription (#6402 )

2026-09-10 17:05:54 +02:00

json_routing_test.go

fix(sub): bound what a remote routing profile renders to

2026-10-31 09:00:06 +00:00

json_routing.go

fix(sub): bound what a remote routing profile renders to

2026-10-31 09:00:06 +00:00

json_service_test.go

feat(xray): update xray-core to v26.10.21 and adapt panel

2026-10-22 17:10:11 +02:00

json_service.go

fix(sub): bound what one subscription response renders

2026-11-01 01:15:28 +01:00

keepalive.go

feat(amneziawg): support persistent keepalive ranges (#6881 )

2026-10-24 06:36:49 +02:00

links_test.go

fix(inbounds): serve fresh client UUIDs for list and allLinks (#6458 )

2026-09-12 11:12:13 +02:00

links.go

feat(clients): bind host rules to individual clients in subscriptions (#6620 )

2026-10-24 12:33:02 +02:00

masque_test.go

fix(finalmask): keep a single udphop mask last in every client finalmask

2026-10-11 18:02:12 +02:00

mutation_audit_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

page_data_test.go

feat(sub): expose live online status and add ?format=info endpoint

2026-07-23 23:57:29 +02:00

placeholders_test.go

fix(sub): prevent default profile page URL disclosure (#6538 )

2026-09-15 21:13:29 +02:00

placeholders.go

fix(sub): prevent default profile page URL disclosure (#6538 )

2026-09-15 21:13:29 +02:00

profile_mode_test.go

fix(sub): prevent default profile page URL disclosure (#6538 )

2026-09-15 21:13:29 +02:00

remark_vars_test.go

fix(sub): convert far expiry dates to Jalali in constant time

2026-10-31 14:28:18 +01:00

remark_vars.go

fix(sub): convert far expiry dates to Jalali in constant time

2026-10-31 14:28:18 +01:00

remote_routing_test.go

fix(sub): bound what a remote routing profile renders to

2026-10-31 09:00:06 +00:00

remote_routing.go

fix(sub): bound what a remote routing profile renders to

2026-10-31 09:00:06 +00:00

render_budget_test.go

fix(sub): bound what one subscription response renders

2026-11-01 01:15:28 +01:00

render_budget.go

fix(sub): bound what one subscription response renders

2026-11-01 01:15:28 +01:00

salamander_uri_test.go

fix(sub): keep the salamander warning state one entry per inbound

2026-11-01 00:45:21 +01:00

service_amneziawg_test.go

feat(amneziawg): support persistent keepalive ranges (#6881 )

2026-10-24 06:36:49 +02:00

service_dedup_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

service_exclude_from_sub_test.go

feat(sub): opt-in dns and sniffer from remote Clash rules (#6868 )

2026-10-24 04:21:04 +02:00

service_flow_test.go

feat(xray): update xray-core to v26.10.21 and adapt panel

2026-10-22 17:10:11 +02:00

service_info_node_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

service_mtproto_test.go

fix(mtproto): use hosts for public share links (#6369 )

2026-09-08 15:36:57 +02:00

service_orphaned_stats_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

service_property_test.go

fix(nodes): stop multi-attached client traffic inflating across node inbounds

2026-06-15 19:31:57 +02:00

service_sharelink_test.go

fix(sub): keep the spider settings in a reality spiderX seed's query (#6694 )

2026-10-03 00:31:52 +02:00

service_sort_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

service_test.go

fix(sub): pin fp=unsafe on links that carry cipher suites

2026-10-25 15:54:42 +01:00

service_tuic_test.go

feat(tuic): implement native in-process Go TUIC v5 server (#6577 )

2026-10-03 02:56:02 +02:00

service_tunnel_hosts_test.go

fix(hosts): advertise Hosts in every WireGuard, AmneziaWG and TUIC config

2026-09-30 15:03:16 +02:00

service_userinfo_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

service_wireguard_test.go

feat(amneziawg): support persistent keepalive ranges (#6881 )

2026-10-24 06:36:49 +02:00

service.go

fix(sub): bound what one subscription response renders

2026-11-01 01:15:28 +01:00

settings_cache_test.go

perf(sub): cache each inbound's settings without clients for subscription bodies (#6758 )

2026-10-24 22:45:46 +02:00

settings_cache.go

perf(sub): cache each inbound's settings without clients for subscription bodies (#6758 )

2026-10-24 22:45:46 +02:00

shadowsocks_plugin_import_test.go

fix(link): rebuild shadowsocks tcp/http obfuscation on import (#6505 )

2026-09-13 19:58:27 +02:00

sub_balancer_protocol_tag_test.go

feat(sub): bake Happ/INCY routing profiles into the JSON subscription (#6402 )

2026-09-10 17:05:54 +02:00

sub_balancer_test.go

feat(sub): bake Happ/INCY routing profiles into the JSON subscription (#6402 )

2026-09-10 17:05:54 +02:00

sub_fetch_test.go

feat(sub): expose last subscription fetch time (#6217 )

2026-08-15 15:22:11 +02:00

sub_json_observatory_test.go

feat(sub): bake Happ/INCY routing profiles into the JSON subscription (#6402 )

2026-09-10 17:05:54 +02:00

sub_panic_test.go

feat(sub): opt-in dns and sniffer from remote Clash rules (#6868 )

2026-10-24 04:21:04 +02:00

sub_scale_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

sub.go

perf(sub): cache each inbound's settings without clients for subscription bodies (#6758 )

2026-10-24 22:45:46 +02:00

vless_route_sub_test.go

feat(sub): opt-in dns and sniffer from remote Clash rules (#6868 )

2026-10-24 04:21:04 +02:00

vless_route_test.go

fix(sub): bake Host VLESS Route into subscription UUIDs

2026-06-29 14:32:23 +02:00

vless_route.go

fix(sub): bake Host VLESS Route into subscription UUIDs

2026-06-29 14:32:23 +02:00

vmess_tls_import_test.go

fix(link): read the vmess certificate checks on import (#6507 )

2026-09-13 19:58:10 +02:00

xdrive_test.go

feat(xray): add the XDRIVE transport

2026-10-11 08:21:08 +02:00