MHSanaei 534afe13ab fix(sub): treat external subscription providers as untrusted input ...

A client's external subscription is fetched from a third party on every
subscriber refresh, and the fetcher trusted it more than its siblings:
- it dialled any address, redirects included; it now goes through the
  SSRF guard like the outbound subscription and remote routing fetchers;
- it forwarded any line containing "://"; it now keeps only server share
  links, so app deeplinks and plain URLs never reach the subscriber's app;
- it bounded the body but not the link count (now 1000) or the headers
  (now 64 KiB), and stored the raw error, URL included, on every row; the
  stored error is now host-only and at most 1 KiB.

The link parser also refuses links that nest JSON past 16 levels, since
the JSON subscription pretty-prints it at quadratic cost, and external
configs are marshalled compactly until the final, single indent pass.

2026-10-31 08:53:27 +00:00

..

build_urls_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

calendar_expire_test.go

feat(sub): add opt-in month-end expiry presentation (#6517)

2026-09-14 12:10:25 +02:00

calendar_expire.go

feat(sub): add opt-in month-end expiry presentation (#6517)

2026-09-14 12:10:25 +02:00

characterization_test.go

fix(sub): restore client email in panel copy/QR link remark (#5532)

2026-06-24 15:25:41 +02:00

clash_external_quota_test.go

feat(sub): map shadowsocks TCP HTTP headers to Mihomo's obfs plugin (#6838)

2026-10-24 07:10:30 +02:00

clash_external_shadowsocks_test.go

feat(sub): map shadowsocks TCP HTTP headers to Mihomo's obfs plugin (#6838)

2026-10-24 07:10:30 +02:00

clash_external_vless_test.go

feat(sub): opt-in dns and sniffer from remote Clash rules (#6868)

2026-10-24 04:21:04 +02:00

clash_external.go

fix(sub): preserve external VLESS encryption in Clash subscriptions (#6576)

2026-09-26 20:31:50 +02:00

clash_info_node_test.go

feat(sub): opt-in dns and sniffer from remote Clash rules (#6868)

2026-10-24 04:21:04 +02:00

clash_remote_dns_test.go

feat(sub): opt-in dns and sniffer from remote Clash rules (#6868)

2026-10-24 04:21:04 +02:00

clash_service_test.go

feat(sub): map shadowsocks TCP HTTP headers to Mihomo's obfs plugin (#6838)

2026-10-24 07:10:30 +02:00

clash_service.go

feat(clients): bind host rules to individual clients in subscriptions (#6620)

2026-10-24 12:33:02 +02:00

clash_yaml_test.go

style: drop the line comments added with the triage fixes

2026-07-27 14:37:57 +02:00

clash_yaml.go

style: drop the line comments added with the triage fixes

2026-07-27 14:37:57 +02:00

controller_test.go

fix(sub): send no-store on every subscription route (#6862)

2026-10-24 06:08:02 +02:00

controller.go

perf(sub): cache each inbound's settings without clients for subscription bodies (#6758)

2026-10-24 22:45:46 +02:00

default_json_test.go

fix(sub): drop legacy freedom.domainStrategy from JSON sub template (#6609)

2026-09-26 21:13:39 +02:00

default.json

fix(sub): drop legacy freedom.domainStrategy from JSON sub template (#6609)

2026-09-26 21:13:39 +02:00

dist.go

feat(sub): add raw subscription download actions (#6017)

2026-07-21 15:52:33 +02:00

endpoint_test.go

feat(sub): refine Happ routing presets, serverDescription escaping, and auto-detect placement (#6488)

2026-09-13 12:53:57 +02:00

endpoint.go

fix(sub): carry REALITY ML-KEM hint in VLESS links (#6712)

2026-10-02 15:44:41 +02:00

export_all_links_test.go

fix(inbounds): serve fresh client UUIDs for list and allLinks (#6458)

2026-09-12 11:12:13 +02:00

external_config_test.go

fix(sub): treat external subscription providers as untrusted input

2026-10-31 08:53:27 +00:00

external_config.go

fix(sub): treat external subscription providers as untrusted input

2026-10-31 08:53:27 +00:00

external_hwid_test.go

fix(sub): treat external subscription providers as untrusted input

2026-10-31 08:53:27 +00:00

external_only_sub_test.go

feat(sub): opt-in dns and sniffer from remote Clash rules (#6868)

2026-10-24 04:21:04 +02:00

external_remark_test.go

fix(sub): keep serverDescription literal in external link fragments (#6580)

2026-09-26 22:00:09 +02:00

external_subscription_test.go

fix(sub): treat external subscription providers as untrusted input

2026-10-31 08:53:27 +00:00

external_subscription.go

fix(sub): treat external subscription providers as untrusted input

2026-10-31 08:53:27 +00:00

forwarded_trust_test.go

fix(sub): never use X-Real-IP as the subscription host (#6608)

2026-09-26 21:13:46 +02:00

forwarded_trust.go

fix(sub): honor trustedProxyCIDRs before forwarded URLs (#6135)

2026-07-29 21:01:59 +02:00

happ_test.go

fix(sub): make Happ require auth on its local SOCKS/HTTP proxy (#6628)

2026-09-26 22:03:20 +02:00

happ.go

fix(sub): make Happ require auth on its local SOCKS/HTTP proxy (#6628)

2026-09-26 22:03:20 +02:00

host_cidr_test.go

feat(sub): generate random IPs from CIDR host addresses (#6784)

2026-10-24 05:13:44 +02:00

host_cidr.go

feat(sub): generate random IPs from CIDR host addresses (#6784)

2026-10-24 05:13:44 +02:00

host_order_test.go

fix(sub): close a deleted host binding only on the inbound it served

2026-10-24 20:07:55 +02:00

host_order.go

feat(hosts): give a host a pool of SNIs, random per config or shared (#6923)

2026-10-24 21:05:42 +02:00

host_sub_test.go

fix(sub): pin fp=unsafe on links that carry cipher suites

2026-10-25 15:54:42 +01:00

host_sub.go

feat(hosts): give a host a pool of SNIs, random per config or shared (#6923)

2026-10-24 21:05:42 +02:00

hwid_controller_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

hysteria_geco_uri_test.go

fix(sub): export Hysteria2 Gecko obfs in Clash/Mihomo subscriptions

2026-10-14 14:42:00 +02:00

hysteria_server_description_test.go

fix(sub): append host serverDescription to hysteria links (#6740)

2026-10-05 19:05:13 +02:00

inactive_external_sub_test.go

Feature/fix external subscription client expiry (#6333)

2026-09-03 22:32:05 +02:00

incy_test.go

feat(sub): add Incy app-management parameters (#6650)

2026-09-27 01:06:17 +02:00

incy.go

feat(sub): add Incy app-management parameters (#6650)

2026-09-27 01:06:17 +02:00

info_endpoint_test.go

feat(sub): redesign the subscription page around usage, tabs and app imports

2026-09-16 01:55:56 +02:00

json_dns_controller_test.go

feat(sub): let the panel set the JSON subscription DNS servers (#6485)

2026-09-13 11:51:56 +02:00

json_dns_test.go

feat(sub): let the panel set the JSON subscription DNS servers (#6485)

2026-09-13 11:51:56 +02:00

json_dns.go

feat(sub): let the panel set the JSON subscription DNS servers (#6485)

2026-09-13 11:51:56 +02:00

json_flow_gate_test.go

feat(sub): opt-in dns and sniffer from remote Clash rules (#6868)

2026-10-24 04:21:04 +02:00

json_info_node_test.go

feat(sub): bake Happ/INCY routing profiles into the JSON subscription (#6402)

2026-09-10 17:05:54 +02:00

json_routing_baked_test.go

feat(sub): bake Happ/INCY routing profiles into the JSON subscription (#6402)

2026-09-10 17:05:54 +02:00

json_routing_test.go

feat(sub): bake Happ/INCY routing profiles into the JSON subscription (#6402)

2026-09-10 17:05:54 +02:00

json_routing.go

feat(sub): bake Happ/INCY routing profiles into the JSON subscription (#6402)

2026-09-10 17:05:54 +02:00

json_service_test.go

feat(xray): update xray-core to v26.10.21 and adapt panel

2026-10-22 17:10:11 +02:00

json_service.go

fix(sub): treat external subscription providers as untrusted input

2026-10-31 08:53:27 +00:00

keepalive.go

feat(amneziawg): support persistent keepalive ranges (#6881)

2026-10-24 06:36:49 +02:00

links_test.go

fix(inbounds): serve fresh client UUIDs for list and allLinks (#6458)

2026-09-12 11:12:13 +02:00

links.go

feat(clients): bind host rules to individual clients in subscriptions (#6620)

2026-10-24 12:33:02 +02:00

masque_test.go

fix(finalmask): keep a single udphop mask last in every client finalmask

2026-10-11 18:02:12 +02:00

mutation_audit_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

page_data_test.go

feat(sub): expose live online status and add ?format=info endpoint

2026-07-23 23:57:29 +02:00

placeholders_test.go

fix(sub): prevent default profile page URL disclosure (#6538)

2026-09-15 21:13:29 +02:00

placeholders.go

fix(sub): prevent default profile page URL disclosure (#6538)

2026-09-15 21:13:29 +02:00

profile_mode_test.go

fix(sub): prevent default profile page URL disclosure (#6538)

2026-09-15 21:13:29 +02:00

remark_vars_test.go

fix(sub): use a fullwidth percent in USAGE_PERCENTAGE (#6174)

2026-08-14 20:13:15 +02:00

remark_vars.go

feat(sub): add dummy info node and status configs for subscriptions (#6412)

2026-09-08 17:14:01 +02:00

remote_routing_test.go

feat(sub): opt-in dns and sniffer from remote Clash rules (#6868)

2026-10-24 04:21:04 +02:00

remote_routing.go

fix(net): stop per-request clients parking connections to remote hosts

2026-10-31 08:32:58 +00:00

salamander_uri_test.go

fix(hysteria): standard geco share links and persistent uTLS None (#6325)

2026-09-03 16:35:07 +02:00

service_amneziawg_test.go

feat(amneziawg): support persistent keepalive ranges (#6881)

2026-10-24 06:36:49 +02:00

service_dedup_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

service_exclude_from_sub_test.go

feat(sub): opt-in dns and sniffer from remote Clash rules (#6868)

2026-10-24 04:21:04 +02:00

service_flow_test.go

feat(xray): update xray-core to v26.10.21 and adapt panel

2026-10-22 17:10:11 +02:00

service_info_node_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

service_mtproto_test.go

fix(mtproto): use hosts for public share links (#6369)

2026-09-08 15:36:57 +02:00

service_orphaned_stats_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

service_property_test.go

fix(nodes): stop multi-attached client traffic inflating across node inbounds

2026-06-15 19:31:57 +02:00

service_sharelink_test.go

fix(sub): keep the spider settings in a reality spiderX seed's query (#6694)

2026-10-03 00:31:52 +02:00

service_sort_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

service_test.go

fix(sub): pin fp=unsafe on links that carry cipher suites

2026-10-25 15:54:42 +01:00

service_tuic_test.go

feat(tuic): implement native in-process Go TUIC v5 server (#6577)

2026-10-03 02:56:02 +02:00

service_tunnel_hosts_test.go

fix(hosts): advertise Hosts in every WireGuard, AmneziaWG and TUIC config

2026-09-30 15:03:16 +02:00

service_userinfo_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

service_wireguard_test.go

feat(amneziawg): support persistent keepalive ranges (#6881)

2026-10-24 06:36:49 +02:00

service.go

fix(sub): pin fp=unsafe on links that carry cipher suites

2026-10-25 15:54:42 +01:00

settings_cache_test.go

perf(sub): cache each inbound's settings without clients for subscription bodies (#6758)

2026-10-24 22:45:46 +02:00

settings_cache.go

perf(sub): cache each inbound's settings without clients for subscription bodies (#6758)

2026-10-24 22:45:46 +02:00

shadowsocks_plugin_import_test.go

fix(link): rebuild shadowsocks tcp/http obfuscation on import (#6505)

2026-09-13 19:58:27 +02:00

sub_balancer_protocol_tag_test.go

feat(sub): bake Happ/INCY routing profiles into the JSON subscription (#6402)

2026-09-10 17:05:54 +02:00

sub_balancer_test.go

feat(sub): bake Happ/INCY routing profiles into the JSON subscription (#6402)

2026-09-10 17:05:54 +02:00

sub_fetch_test.go

feat(sub): expose last subscription fetch time (#6217)

2026-08-15 15:22:11 +02:00

sub_json_observatory_test.go

feat(sub): bake Happ/INCY routing profiles into the JSON subscription (#6402)

2026-09-10 17:05:54 +02:00

sub_panic_test.go

feat(sub): opt-in dns and sniffer from remote Clash rules (#6868)

2026-10-24 04:21:04 +02:00

sub_scale_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

sub.go

perf(sub): cache each inbound's settings without clients for subscription bodies (#6758)

2026-10-24 22:45:46 +02:00

vless_route_sub_test.go

feat(sub): opt-in dns and sniffer from remote Clash rules (#6868)

2026-10-24 04:21:04 +02:00

vless_route_test.go

fix(sub): bake Host VLESS Route into subscription UUIDs

2026-06-29 14:32:23 +02:00

vless_route.go

fix(sub): bake Host VLESS Route into subscription UUIDs

2026-06-29 14:32:23 +02:00

vmess_tls_import_test.go

fix(link): read the vmess certificate checks on import (#6507)

2026-09-13 19:58:10 +02:00

xdrive_test.go

feat(xray): add the XDRIVE transport

2026-10-11 08:21:08 +02:00