samwafgo
dfc99ceb3e
Merge pull request #1041 from samwafgo/feat_system_ip_global
...
feat: make firewall IP blocks global and confirm WAF whole-network rules
2026-10-30 14:54:10 +08:00
samwaf
58c9c9569b
feat: make firewall IP blocks global and confirm WAF whole-network rules
2026-10-30 14:49:23 +08:00
samwafgo
e5bb1f1f48
Merge pull request #1040 from samwafgo/feat_log_unified_export
...
feat: add unified log export tasks
2026-10-30 11:15:07 +08:00
samwaf
195a668c99
feat: add unified log export tasks
2026-10-30 11:10:00 +08:00
samwafgo
f028e7076b
Merge pull request #1039 from samwafgo/fix_httpauth_log
...
fix: attribute website password gate blocks in the access log
2026-10-29 14:17:15 +08:00
samwaf
42f40d83da
fix: attribute website password gate blocks in the access log
2026-10-29 14:10:21 +08:00
samwafgo
75944f5371
Merge pull request #1038 from samwafgo/fix_host_import_types
...
fix: support integer widths in website Excel imports
2026-10-27 14:43:06 +08:00
samwaf
2707b5350e
fix: support integer widths in website Excel imports
2026-10-27 14:42:10 +08:00
samwafgo
9908d5124a
Merge pull request #1037 from samwafgo/feat_website_diagnostic
...
feat: add staged website access diagnostics
2026-10-27 13:47:10 +08:00
samwaf
eeec24bf3a
feat: add staged website access diagnostics
2026-10-27 13:40:50 +08:00
samwafgo
3d8ce3935b
Merge pull request #1030 from samwafgo/feat_app_manage_guide
...
Feat app manage guide
2026-10-22 12:56:39 +08:00
samwaf
c19daaf19b
feat: expose application management feature status
...
#1028
2026-10-22 12:55:53 +08:00
samwaf
76ad786835
!45 feat: per-entry enable switches for IP/URL black and white lists
...
Merge pull request !45 from samwaf/feat_list_switches
2026-10-21 08:22:03 +00:00
samwaf
e35b3c6800
feat: per-entry enable switches for IP/URL black and white lists
...
#IJL0GB
2026-10-21 16:07:57 +08:00
samwaf
3a032e77d9
!44 feat: support temporary client IP bans through custom rules
...
Merge pull request !44 from samwaf/feat_rule_ban_simple
2026-10-21 03:22:56 +00:00
samwaf
ae1d61eb32
feat: support temporary client IP bans through custom rules
...
#IKHZMG
2026-10-21 11:20:44 +08:00
samwafgo
28f4cec80e
Merge pull request #1027 from samwafgo/feat_log_url_search
...
feat: support URL keyword filtering in visit logs
2026-10-20 15:40:55 +08:00
samwaf
6dde44748d
feat: support URL keyword filtering in visit logs
...
#1024
2026-10-20 15:30:34 +08:00
samwafgo
7addaa5808
Merge pull request #1026 from samwafgo/feat_manage_title
...
feat: support a unified custom admin title
2026-10-20 11:28:36 +08:00
samwaf
e7814785d6
feat: support a unified custom admin title
...
#1025
2026-10-20 11:23:23 +08:00
samwaf
50e7b35be3
!43 fix: reset health status when health check settings change
...
Merge pull request !43 from samwaf/fix_health_bug
2026-10-19 06:00:00 +00:00
samwaf
69cb92b99d
fix: reset health status when health check settings change
...
#IKM3X4
2026-10-19 13:58:11 +08:00
samwafgo
3db885b1d3
Merge pull request #1023 from samwafgo/feat_unmatched_page
...
feat: add global unmatched website response and setup guidance
2026-10-19 11:09:21 +08:00
samwaf
d432e2b3ad
feat: add global unmatched website response and setup guidance
...
#948
2026-10-19 10:53:20 +08:00
samwafgo
ba5e360fec
Merge pull request #1022 from samwafgo/fix_notice_title
...
fix: serverchan truncated notification titles by bytes
2026-10-17 16:37:17 +08:00
samwaf
8001d29a10
fix: serverchan truncated notification titles by bytes
...
#1021
2026-10-17 16:33:27 +08:00
samwafgo
ef2dc49ef3
Merge pull request #1020 from samwafgo/fix_ssl_applymethodbug
...
fix: reject invalid apply_method on SSL order add and renew before st…
2026-10-15 10:36:47 +08:00
samwaf
62257c6cd1
fix: reject invalid apply_method on SSL order add and renew before storing
...
#1006
2026-10-15 10:32:12 +08:00
samwafgo
787b3fb624
Merge pull request #1019 from samwafgo/fix_openapi_tag
...
fix: GET query parameter names disagreed with the docs, silently retu…
2026-10-15 10:05:39 +08:00
samwaf
0638f61dca
fix: GET query parameter names disagreed with the docs, silently returning empty data
...
#1008
2026-10-15 10:02:34 +08:00
samwaf
49726fe7ed
!42 feat:manual health test in website editor
...
Merge pull request !42 from samwaf/feat_health_manual
2026-10-14 07:10:31 +00:00
samwaf
99233a9b48
feat:manual health test in website editor
...
#IKJVS0
2026-10-14 15:09:24 +08:00
samwafgo
677c656fdd
Merge pull request #1018 from samwafgo/fix_tunnel_mysql
...
fix:tunnel failed to parse client IP
2026-10-14 13:36:37 +08:00
samwaf
77d112603d
fix:tunnel failed to parse client IP
2026-10-14 13:32:16 +08:00
samwafgo
f3f148098d
fix: record CC-ban-window block ( #1016 )
...
#1001
2026-10-14 09:47:55 +08:00
samwaf
1b7b73b40b
fix: record CC-ban-window block
...
#1001
2026-10-14 09:42:59 +08:00
samwaf
baff734939
ci: acknowledge linked issue reporters and PR authors in releases
2026-10-13 14:20:23 +08:00
Shujun Lv
d76ba94b27
feat(waf-captcha): 增强验证码安全性以及行为验证 ( #1011 )
...
* feat(waf-captcha): 验证码取题与交卷接口按IP限频
* feat(waf-captcha): 传统点选验证码增加服务端行为校验
2026-10-13 13:34:58 +08:00
samwafgo
6f4d9e8364
fix: read cached failure records type-safely across cache backends ( #1014 )
...
#1002
2026-10-13 13:32:29 +08:00
samwafgo
1cd8afb35d
fix: cascade-delete CC rules when removing a host and clean up existing orphan rules ( #1013 )
...
#1010
2026-10-13 09:30:07 +08:00
samwaf
52cf18f464
!41 feat: website password access can now protect only specified paths, wi…
...
Merge pull request !41 from samwaf/feat_httpauth_path
2026-10-12 06:49:24 +00:00
samwaf
a4d15f560c
feat: website password access can now protect only specified paths, with a password-free IP group
...
#IKJN44
2026-10-12 14:47:24 +08:00
samwafgo
64aaab16fa
Feat log shared ( #1007 )
...
* fix: make archived log shard connections concurrency-safe and recoverable
* fix: build the WebSocket online table before its consumers start
* perf: cap stored payloads, index log lookups by IP and rule, batch IP tag writes
* fix: keep archived log shards readable when the live table gains a column
* feat: merge IP tag history when their database location changes
* refactor: move request payloads out of the access log into their own table
* feat: scope log database export to a time range and selected tiers
* feat: add an IP watchlist that full-captures watched IPs
* feat: split log storage into security events, access rows, and payload tiers
* feat: roll up requests per actor and path into daily analysis tables
* fix:actor key by ip
* feat: add a source and path analysis page over the daily rollups
* feat: exclude chosen source IPs from web log recording
* docs: add upgrade notes for the analysis page and log IP exclusion
* feat: derive the log partition from the time range and look up identifiers across all of them
* feat: add time partition verbs and the period naming they share
* feat: cut log archives per month and expire them by dropping partitions
* feat: manage log partitions, and answer why an IP has no logs
* fix: read archived SQLite log shards read-only and choose tiers by data
* fix: count the live log shard from access_log instead of a stale snapshot
* fix:export db bug
* fix: default backend keep-alive pool (512/128/90s) to stop connect-close churn under load
* chore: gen_swagger.bat outputs json only, syncs doc site, runs route test
* feat: pin web frontend version and embed it into the binary
2026-10-10 14:39:06 +08:00
samwafgo
a58073f0bc
Merge pull request #1009 from samwafgo/feat_issue_template_question
...
docs: add question template and English versions of all issue templates
2026-09-29 16:15:00 +08:00
samwaf
1edbb5f16a
docs: add question template and English versions of all issue templates
2026-09-29 16:10:59 +08:00
samwafgo
d975b12ec0
Merge pull request #1005 from samwafgo/fix_token
...
fix: treat a literal null token as no token at all
2026-09-16 14:35:35 +08:00
samwaf
cf8b1a9e53
fix: treat a literal null token as no token at all
...
#938
2026-09-16 14:34:22 +08:00
samwafgo
72b84b1f32
Merge pull request #1000 from samwafgo/fix_redis_cache_semantics
...
fix: distinguish a cache miss from an unavailable cache backend
2026-09-12 21:48:09 +08:00
samwaf
78fbd55e7a
fix: distinguish a cache miss from an unavailable cache backend
...
#938
2026-09-12 21:46:37 +08:00
samwafgo
49f29fbd77
Merge pull request #997 from samwafgo/fix_access_cros
...
fix:access cors
2026-09-07 16:20:26 +08:00
samwafgo