MHSanaei c3d4a153b3 fix(sub): pin fp=unsafe on links that carry cipher suites ...

Xray builds the ClientHello with uTLS for every fingerprint except
"unsafe", and GetFingerprint("") resolves to chrome, so cipherSuites are
dropped unless the fingerprint is exactly "unsafe". A host or inbound
that set cs and left the fingerprint blank shipped links whose cs did
nothing in v2rayN, PattN and every other Xray-based client.

Raw links (query and vmess JSON), the JSON subscription and the panel's
own link generator now emit fp=unsafe when cs is present and the final
fingerprint is empty. An explicit fingerprint is left as configured.

2026-10-25 15:54:42 +01:00

..

build_urls_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

calendar_expire_test.go

feat(sub): add opt-in month-end expiry presentation (#6517)

2026-09-14 12:10:25 +02:00

calendar_expire.go

feat(sub): add opt-in month-end expiry presentation (#6517)

2026-09-14 12:10:25 +02:00

characterization_test.go

fix(sub): restore client email in panel copy/QR link remark (#5532)

2026-06-24 15:25:41 +02:00

clash_external_quota_test.go

feat(sub): map shadowsocks TCP HTTP headers to Mihomo's obfs plugin (#6838)

2026-10-24 07:10:30 +02:00

clash_external_shadowsocks_test.go

feat(sub): map shadowsocks TCP HTTP headers to Mihomo's obfs plugin (#6838)

2026-10-24 07:10:30 +02:00

clash_external_vless_test.go

feat(sub): opt-in dns and sniffer from remote Clash rules (#6868)

2026-10-24 04:21:04 +02:00

clash_external.go

fix(sub): preserve external VLESS encryption in Clash subscriptions (#6576)

2026-09-26 20:31:50 +02:00

clash_info_node_test.go

feat(sub): opt-in dns and sniffer from remote Clash rules (#6868)

2026-10-24 04:21:04 +02:00

clash_remote_dns_test.go

feat(sub): opt-in dns and sniffer from remote Clash rules (#6868)

2026-10-24 04:21:04 +02:00

clash_service_test.go

feat(sub): map shadowsocks TCP HTTP headers to Mihomo's obfs plugin (#6838)

2026-10-24 07:10:30 +02:00

clash_service.go

feat(clients): bind host rules to individual clients in subscriptions (#6620)

2026-10-24 12:33:02 +02:00

clash_yaml_test.go

style: drop the line comments added with the triage fixes

2026-07-27 14:37:57 +02:00

clash_yaml.go

style: drop the line comments added with the triage fixes

2026-07-27 14:37:57 +02:00

controller_test.go

fix(sub): send no-store on every subscription route (#6862)

2026-10-24 06:08:02 +02:00

controller.go

perf(sub): cache each inbound's settings without clients for subscription bodies (#6758)

2026-10-24 22:45:46 +02:00

default_json_test.go

fix(sub): drop legacy freedom.domainStrategy from JSON sub template (#6609)

2026-09-26 21:13:39 +02:00

default.json

fix(sub): drop legacy freedom.domainStrategy from JSON sub template (#6609)

2026-09-26 21:13:39 +02:00

dist.go

feat(sub): add raw subscription download actions (#6017)

2026-07-21 15:52:33 +02:00

endpoint_test.go

feat(sub): refine Happ routing presets, serverDescription escaping, and auto-detect placement (#6488)

2026-09-13 12:53:57 +02:00

endpoint.go

fix(sub): carry REALITY ML-KEM hint in VLESS links (#6712)

2026-10-02 15:44:41 +02:00

export_all_links_test.go

fix(inbounds): serve fresh client UUIDs for list and allLinks (#6458)

2026-09-12 11:12:13 +02:00

external_config_test.go

feat(sub): opt-in dns and sniffer from remote Clash rules (#6868)

2026-10-24 04:21:04 +02:00

external_config.go

fix(sub): keep serverDescription literal in external link fragments (#6580)

2026-09-26 22:00:09 +02:00

external_hwid_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

external_only_sub_test.go

feat(sub): opt-in dns and sniffer from remote Clash rules (#6868)

2026-10-24 04:21:04 +02:00

external_remark_test.go

fix(sub): keep serverDescription literal in external link fragments (#6580)

2026-09-26 22:00:09 +02:00

external_subscription_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

external_subscription.go

feat(sub): make external subscription fetch User-Agent configurable (#6613)

2026-09-26 23:36:33 +02:00

forwarded_trust_test.go

fix(sub): never use X-Real-IP as the subscription host (#6608)

2026-09-26 21:13:46 +02:00

forwarded_trust.go

fix(sub): honor trustedProxyCIDRs before forwarded URLs (#6135)

2026-07-29 21:01:59 +02:00

happ_test.go

fix(sub): make Happ require auth on its local SOCKS/HTTP proxy (#6628)

2026-09-26 22:03:20 +02:00

happ.go

fix(sub): make Happ require auth on its local SOCKS/HTTP proxy (#6628)

2026-09-26 22:03:20 +02:00

host_cidr_test.go

feat(sub): generate random IPs from CIDR host addresses (#6784)

2026-10-24 05:13:44 +02:00

host_cidr.go

feat(sub): generate random IPs from CIDR host addresses (#6784)

2026-10-24 05:13:44 +02:00

host_order_test.go

fix(sub): close a deleted host binding only on the inbound it served

2026-10-24 20:07:55 +02:00

host_order.go

feat(hosts): give a host a pool of SNIs, random per config or shared (#6923)

2026-10-24 21:05:42 +02:00

host_sub_test.go

fix(sub): pin fp=unsafe on links that carry cipher suites

2026-10-25 15:54:42 +01:00

host_sub.go

feat(hosts): give a host a pool of SNIs, random per config or shared (#6923)

2026-10-24 21:05:42 +02:00

hwid_controller_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

hysteria_geco_uri_test.go

fix(sub): export Hysteria2 Gecko obfs in Clash/Mihomo subscriptions

2026-10-14 14:42:00 +02:00

hysteria_server_description_test.go

fix(sub): append host serverDescription to hysteria links (#6740)

2026-10-05 19:05:13 +02:00

inactive_external_sub_test.go

Feature/fix external subscription client expiry (#6333)

2026-09-03 22:32:05 +02:00

incy_test.go

feat(sub): add Incy app-management parameters (#6650)

2026-09-27 01:06:17 +02:00

incy.go

feat(sub): add Incy app-management parameters (#6650)

2026-09-27 01:06:17 +02:00

info_endpoint_test.go

feat(sub): redesign the subscription page around usage, tabs and app imports

2026-09-16 01:55:56 +02:00

json_dns_controller_test.go

feat(sub): let the panel set the JSON subscription DNS servers (#6485)

2026-09-13 11:51:56 +02:00

json_dns_test.go

feat(sub): let the panel set the JSON subscription DNS servers (#6485)

2026-09-13 11:51:56 +02:00

json_dns.go

feat(sub): let the panel set the JSON subscription DNS servers (#6485)

2026-09-13 11:51:56 +02:00

json_flow_gate_test.go

feat(sub): opt-in dns and sniffer from remote Clash rules (#6868)

2026-10-24 04:21:04 +02:00

json_info_node_test.go

feat(sub): bake Happ/INCY routing profiles into the JSON subscription (#6402)

2026-09-10 17:05:54 +02:00

json_routing_baked_test.go

feat(sub): bake Happ/INCY routing profiles into the JSON subscription (#6402)

2026-09-10 17:05:54 +02:00

json_routing_test.go

feat(sub): bake Happ/INCY routing profiles into the JSON subscription (#6402)

2026-09-10 17:05:54 +02:00

json_routing.go

feat(sub): bake Happ/INCY routing profiles into the JSON subscription (#6402)

2026-09-10 17:05:54 +02:00

json_service_test.go

feat(xray): update xray-core to v26.10.21 and adapt panel

2026-10-22 17:10:11 +02:00

json_service.go

fix(sub): pin fp=unsafe on links that carry cipher suites

2026-10-25 15:54:42 +01:00

keepalive.go

feat(amneziawg): support persistent keepalive ranges (#6881)

2026-10-24 06:36:49 +02:00

links_test.go

fix(inbounds): serve fresh client UUIDs for list and allLinks (#6458)

2026-09-12 11:12:13 +02:00

links.go

feat(clients): bind host rules to individual clients in subscriptions (#6620)

2026-10-24 12:33:02 +02:00

masque_test.go

fix(finalmask): keep a single udphop mask last in every client finalmask

2026-10-11 18:02:12 +02:00

mutation_audit_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

page_data_test.go

feat(sub): expose live online status and add ?format=info endpoint

2026-07-23 23:57:29 +02:00

placeholders_test.go

fix(sub): prevent default profile page URL disclosure (#6538)

2026-09-15 21:13:29 +02:00

placeholders.go

fix(sub): prevent default profile page URL disclosure (#6538)

2026-09-15 21:13:29 +02:00

profile_mode_test.go

fix(sub): prevent default profile page URL disclosure (#6538)

2026-09-15 21:13:29 +02:00

remark_vars_test.go

fix(sub): use a fullwidth percent in USAGE_PERCENTAGE (#6174)

2026-08-14 20:13:15 +02:00

remark_vars.go

feat(sub): add dummy info node and status configs for subscriptions (#6412)

2026-09-08 17:14:01 +02:00

remote_routing_test.go

feat(sub): opt-in dns and sniffer from remote Clash rules (#6868)

2026-10-24 04:21:04 +02:00

remote_routing.go

feat(sub): opt-in dns and sniffer from remote Clash rules (#6868)

2026-10-24 04:21:04 +02:00

salamander_uri_test.go

fix(hysteria): standard geco share links and persistent uTLS None (#6325)

2026-09-03 16:35:07 +02:00

service_amneziawg_test.go

feat(amneziawg): support persistent keepalive ranges (#6881)

2026-10-24 06:36:49 +02:00

service_dedup_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

service_exclude_from_sub_test.go

feat(sub): opt-in dns and sniffer from remote Clash rules (#6868)

2026-10-24 04:21:04 +02:00

service_flow_test.go

feat(xray): update xray-core to v26.10.21 and adapt panel

2026-10-22 17:10:11 +02:00

service_info_node_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

service_mtproto_test.go

fix(mtproto): use hosts for public share links (#6369)

2026-09-08 15:36:57 +02:00

service_orphaned_stats_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

service_property_test.go

fix(nodes): stop multi-attached client traffic inflating across node inbounds

2026-06-15 19:31:57 +02:00

service_sharelink_test.go

fix(sub): keep the spider settings in a reality spiderX seed's query (#6694)

2026-10-03 00:31:52 +02:00

service_sort_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

service_test.go

fix(sub): pin fp=unsafe on links that carry cipher suites

2026-10-25 15:54:42 +01:00

service_tuic_test.go

feat(tuic): implement native in-process Go TUIC v5 server (#6577)

2026-10-03 02:56:02 +02:00

service_tunnel_hosts_test.go

fix(hosts): advertise Hosts in every WireGuard, AmneziaWG and TUIC config

2026-09-30 15:03:16 +02:00

service_userinfo_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

service_wireguard_test.go

feat(amneziawg): support persistent keepalive ranges (#6881)

2026-10-24 06:36:49 +02:00

service.go

fix(sub): pin fp=unsafe on links that carry cipher suites

2026-10-25 15:54:42 +01:00

settings_cache_test.go

perf(sub): cache each inbound's settings without clients for subscription bodies (#6758)

2026-10-24 22:45:46 +02:00

settings_cache.go

perf(sub): cache each inbound's settings without clients for subscription bodies (#6758)

2026-10-24 22:45:46 +02:00

shadowsocks_plugin_import_test.go

fix(link): rebuild shadowsocks tcp/http obfuscation on import (#6505)

2026-09-13 19:58:27 +02:00

sub_balancer_protocol_tag_test.go

feat(sub): bake Happ/INCY routing profiles into the JSON subscription (#6402)

2026-09-10 17:05:54 +02:00

sub_balancer_test.go

feat(sub): bake Happ/INCY routing profiles into the JSON subscription (#6402)

2026-09-10 17:05:54 +02:00

sub_fetch_test.go

feat(sub): expose last subscription fetch time (#6217)

2026-08-15 15:22:11 +02:00

sub_json_observatory_test.go

feat(sub): bake Happ/INCY routing profiles into the JSON subscription (#6402)

2026-09-10 17:05:54 +02:00

sub_panic_test.go

feat(sub): opt-in dns and sniffer from remote Clash rules (#6868)

2026-10-24 04:21:04 +02:00

sub_scale_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

sub.go

perf(sub): cache each inbound's settings without clients for subscription bodies (#6758)

2026-10-24 22:45:46 +02:00

vless_route_sub_test.go

feat(sub): opt-in dns and sniffer from remote Clash rules (#6868)

2026-10-24 04:21:04 +02:00

vless_route_test.go

fix(sub): bake Host VLESS Route into subscription UUIDs

2026-06-29 14:32:23 +02:00

vless_route.go

fix(sub): bake Host VLESS Route into subscription UUIDs

2026-06-29 14:32:23 +02:00

vmess_tls_import_test.go

fix(link): read the vmess certificate checks on import (#6507)

2026-09-13 19:58:10 +02:00

xdrive_test.go

feat(xray): add the XDRIVE transport

2026-10-11 08:21:08 +02:00