NgaiYeanCoi 1d85ef138e fix(sub): prevent default profile page URL disclosure (#6538) ...

* fix(sub): prevent default profile page URL disclosure

Add explicit none, builtin, and custom profile page modes.
Preserve existing custom URLs and warn before exposing the built-in page.
Cover mode selection, legacy settings, and subscription response headers.

* fix(subscription): add profile page link options and upgrade notes

2026-09-15 21:13:29 +02:00

..

amneziawg

fix(amneziawg): read the outbound pseudo-protocol id like the core (#6531)

2026-09-15 08:23:18 +03:00

amneziawgnet

fix(ports): refuse an inbound on a port an AmneziaWG peer forwards (#6554)

2026-09-15 16:58:21 +03:00

config

v3.8.0

2026-09-14 19:11:03 +02:00

crypto/nodetoken

fix(nodetoken): make the corrupt-ciphertext test corrupt deterministically (#6520)

2026-09-14 12:08:11 +02:00

database

fix(xray): stop a lone dns qType 0 from matching every query

2026-09-15 16:00:05 +02:00

eventbus

chore: refresh dependencies, fix Linux tool tasks, modernize Go idioms

2026-07-25 16:08:09 +02:00

logger

fix(inbounds): apply runtime changes after the DB commit (#5768)

2026-07-08 22:12:28 +02:00

mtproto

fix(mtproto): synchronize child-process lifecycle (#6141)

2026-07-29 20:56:26 +02:00

pia

chore(build): bump Go toolchain to 1.27.0

2026-08-23 21:57:03 +02:00

sub

fix(sub): prevent default profile page URL disclosure (#6538)

2026-09-15 21:13:29 +02:00

tuic

fix(tuic): evict the oldest relay flow instead of refusing new clients

2026-09-12 10:40:41 +02:00

tunnelmonitor

style: adopt golangci-lint v2 and resolve all findings

2026-06-27 15:42:22 +02:00

util

fix(panel): accept 2FA codes from adjacent TOTP windows (#6546)

2026-09-15 15:42:30 +03:00

web

fix(sub): prevent default profile page URL disclosure (#6538)

2026-09-15 21:13:29 +02:00

xray

fix(node): drop online clients and sub-nodes of nodes no longer synced

2026-09-15 19:27:38 +02:00