PathGao ad288a7ecc fix(sub): honor trustedProxyCIDRs before forwarded URLs (#6135) ...

* fix(sub): honor trustedProxyCIDRs before forwarded URLs

* fix(sub): avoid unused trust-setting lookups

Skip the trustedProxyCIDRs lookup when no forwarded header can affect a subscription URL. Keep the shipped proxy default in one exported setting constant and document the subscription-link behavior for custom proxy boundaries.

* fix(frontend): meet config text contrast requirements

Keep compact configuration text readable in the light theme and satisfy the Storybook accessibility check.

---------

Co-authored-by: PathGao <gaoyanbo@gaoyanbodeMacBook-Air.local>

2026-07-29 21:01:59 +02:00

..

api_auth_test.go

feat(node): node hardening — mTLS, hashed+zstd reconcile transport, per-node net metrics (#5382)

2026-06-16 12:19:33 +02:00

api.go

fix(api): authenticate GET /panel/api/openapi.json + pin the route registry to the router (#6133)

2026-07-29 08:00:05 +02:00

base.go

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

client.go

feat(api): add GET endpoint to look up clients by Telegram ID (#5945)

2026-07-28 22:38:44 +02:00

dist_test.go

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

dist.go

fix(web): opt panel pages out of Cloudflare Rocket Loader

2026-07-11 22:48:59 +02:00

group.go

feat(groups): reset group traffic without touching client counters

2026-06-27 16:33:36 +02:00

host_test.go

feat(hosts): bulk-add multiple hosts to multiple inbounds (#5677)

2026-07-08 23:35:20 +02:00

host.go

feat(hosts): bulk-add multiple hosts to multiple inbounds (#5677)

2026-07-08 23:35:20 +02:00

inbound.go

style: adopt golangci-lint v2 and resolve all findings

2026-06-27 15:42:22 +02:00

index.go

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

login_limiter_test.go

chore: refresh dependencies, fix Linux tool tasks, modernize Go idioms

2026-07-25 16:08:09 +02:00

login_limiter.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

node_credentials_writeonly_test.go

fix(nodes): make node API tokens write-only (#5613)

2026-07-23 15:35:11 +02:00

node.go

fix(nodes): make node API tokens write-only (#5613)

2026-07-23 15:35:11 +02:00

panel_update_test.go

fix: make all self-managed file downloads/installs atomic, with real completion status (#5711)

2026-07-02 18:19:33 +02:00

server.go

Bug-label issue sweep: 16 fixes (#6083)

2026-07-23 15:34:42 +02:00

setting_test.go

feat(sub): auto-detect subscription format by User-Agent (Updated) (#5826)

2026-07-14 13:01:40 +02:00

setting.go

feat(ui): tag settings that sit at their shipped default value (#6128)

2026-07-29 08:03:21 +02:00

spa_test.go

fix(web): serve panel SPA routes from NoRoute (#5536)

2026-06-24 21:19:12 +02:00

spa.go

refactor(frontend): replace axios with the native Fetch API

2026-07-08 01:09:18 +02:00

util_test.go

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

util.go

fix(sub): honor trustedProxyCIDRs before forwarded URLs (#6135)

2026-07-29 21:01:59 +02:00

websocket.go

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

xray_setting.go

Bug-label issue sweep: 16 fixes (#6083)

2026-07-23 15:34:42 +02:00