Hamed 19f2f21d81 fix(inbounds): reject incompatible VLESS fallbacks and prevent Xray crashes (#7003) ...

Xray refuses a VLESS inbound with server decryption whenever fallbacks is non-nil, even an empty list, so an API or imported inbound with decryption and fallbacks: [] took every inbound down. Empty fallback arrays are now normalized away on add, update, config build and node push; non-empty ones are refused with decryption, enabling decryption over stored fallback rules is refused, and a legacy conflicting row holds back the running core instead of stopping it. The form, API docs and locales follow. Closes #7001.

2026-11-03 15:52:30 +01:00

..

claude

feat(i18n): add the Slovak (sk-SK) panel locale (#6889)

2026-10-24 07:35:28 +02:00

ISSUE_TEMPLATE

fix(ci): resync the bot prompts with the repo and close the gaps an audit found

2026-08-17 02:41:21 +02:00

workflows

fix(inbounds): reject incompatible VLESS fallbacks and prevent Xray crashes (#7003)

2026-11-03 15:52:30 +01:00

dependabot.yml

Security hardening: sessions, SSRF, CSP nonce, CSRF logout, trusted proxies (#4275)

2026-05-13 12:52:52 +02:00

FUNDING.yml

chore(github): overhaul issue and PR templates

2026-05-24 22:14:28 +02:00

pull_request_template.md

chore(github): overhaul issue and PR templates

2026-05-24 22:14:28 +02:00