 samwaf
|
baade92bee
|
fix:access cors
|
2026-09-07 16:18:29 +08:00 |
|
|
samwaf
|
c3b263b7f3
|
feat:website password session lifetime and online session management
#987
|
2026-09-06 07:32:04 +08:00 |
|
|
samwaf
|
619155764f
|
feat: enhance cc
#IK7J58
|
2026-09-03 11:22:53 +08:00 |
|
|
samwaf
|
b3a998a815
|
feat:add port protocol
#955
|
2026-08-30 14:39:12 +08:00 |
|
|
samwaf
|
2f18485946
|
feat:add host group
#980
|
2026-08-28 17:15:24 +08:00 |
|
|
samwaf
|
50127ad8ea
|
fix: remove the central-management feature
|
2026-08-24 13:39:05 +08:00 |
|
|
samwaf
|
89ae2bad67
|
feat: show the release version in upgrade notes
|
2026-08-22 18:31:41 +08:00 |
|
|
samwaf
|
b3379d4150
|
fix:ssl export
|
2026-08-21 21:53:50 +08:00 |
|
|
xingxing
|
bec1bacacd
|
特性：添加IsEnableResponseBuffering字段及相关迁移 (#953)
* 特性：添加IsEnableResponseBuffering字段及相关迁移
引入了IsEnableResponseBuffering来管理响应缓冲行为。
- 添加了从disable_response_buffering到is_enable_response_buffering的迁移转换。
- 更新了WafHostAddReq和WafHostEditReq，以包含新字段。
- 在WafEngine中实现了基于新配置处理响应缓冲的逻辑。
* 特性：更新主机表迁移，以添加is_enable_response_buffering字段
- 将已弃用的disable_response_buffering字段替换为is_enable_response_buffering。
- 更新了迁移逻辑，以确保对新字段的正确处理和为其设置默认值。
- 删除了与旧字段相关的遗留迁移步骤。
|
2026-08-18 08:35:34 +08:00 |
|
|
samwaf
|
b4cd2e3dad
|
feat:ssl cert export path
#929
|
2026-08-16 10:58:42 +08:00 |
|
|
samwafgo
|
25524ec65a
|
fix:blocking page content priority (#945)
#IK8KA7
|
2026-08-14 23:25:20 +08:00 |
|
|
samwaf
|
d4afca80b9
|
fix:real ip source config not saved and edgeone default header
|
2026-08-12 20:50:33 +08:00 |
|
|
samwaf
|
8bd938c3cb
|
feat:threat intel IP exclusion list for false positives
|
2026-08-11 14:52:20 +08:00 |
|
|
samwaf
|
cea6dc26f4
|
feat:add iplookup
|
2026-08-11 10:36:12 +08:00 |
|
|
samwaf
|
86409183b5
|
feat:add host guard
#529 #368 #555
|
2026-08-07 10:38:10 +08:00 |
|
|
samwaf
|
b6cf76481d
|
feat:add login tips
#924
|
2026-08-06 18:23:14 +08:00 |
|
|
samwaf
|
14f6d39f92
|
fix:system info dialog and ai assistant
|
2026-08-06 10:47:56 +08:00 |
|
|
samwaf
|
9b77a6f6bd
|
feat:notify subscription rate control and message template
#822
|
2026-08-05 14:21:40 +08:00 |
|
|
samwaf
|
3ef6b4830b
|
feat:unified access authentication
#408
|
2026-08-05 10:21:43 +08:00 |
|
|
samwaf
|
2a972b9120
|
feat:add ip group
#905 #195
|
2026-08-03 16:33:22 +08:00 |
|
|
samwaf
|
3a7dc1a6c8
|
feat:merging
|
2026-08-03 09:23:20 +08:00 |
|
|
samwaf
|
f383bd16e6
|
feat:save visit log column config per account on server
#893
|
2026-07-28 10:36:38 +08:00 |
|
|
samwaf
|
e35d318bcb
|
fix:list rule moved to another site left stale cache on the old site
#898
|
2026-07-27 11:43:25 +08:00 |
|
|
samwaf
|
b354525421
|
feat:per-host outbound HTTP/2 switch
|
2026-07-22 13:52:53 +08:00 |
|
|
samwaf
|
7eedb74c3b
|
feat:batch import hosts from nginx
#881
|
2026-07-16 10:26:52 +08:00 |
|
|
samwaf
|
c7cdbe397a
|
feat:add AI rule generation, GPT settings, request timeout config and rule chain mode entry
#844
|
2026-07-13 16:43:23 +08:00 |
|
|
samwaf
|
0b87b371a0
|
fix(security): gate /debug behind auth+ip-whitelist, CORS origin allowlist with loopback bypass (N8, N9)
|
2026-07-06 11:41:07 +08:00 |
|
|
samwaf
|
8aae66efbe
|
fix(security): validate trusted proxy before honoring client-IP headers on management port
- default GCONFIG_MANAGE_PROXY_HEADER to empty; add GCONFIG_MANAGE_TRUSTED_PROXIES
|
2026-07-03 22:35:59 +08:00 |
|
|
samwaf
|
8e4286150d
|
fix(security): structured whitelist for SQL query API (remove raw SQL)
- Replace raw SQL execution with a structured query (table/mode/columns/filters/top); backend no longer accepts any SQL string
- Fail-closed table & column whitelist: block sensitive tables (auth/key/cert/config/plugin) and columns (password/secret/token/private/key)
- Block EAV/key-value tables (value/params columns) to prevent plaintext secret leak, e.g. system_configs.value
- Parameterize all filter values via GORM clause expressions; operator whitelist; cap filters/IN length
- Add queryable-schema endpoint + query audit logging; harden GetTableInfo to skip sensitive tables/columns
|
2026-07-03 16:30:53 +08:00 |
|
|
samwaf
|
36a083d00b
|
feat:path rule backend protocol, access log switch and response timeout
#857
|
2026-07-02 15:59:11 +08:00 |
|
|
samwaf
|
31b334622e
|
feat:file upload detection config
#844
|
2026-07-02 11:31:43 +08:00 |
|
|
samwaf
|
74dfab253a
|
feat:tamper url extract, batch ops, table filter/sort
#844
|
2026-07-01 16:43:15 +08:00 |
|
|
samwaf
|
d698f88e69
|
feat:web page anti-tamper protection
|
2026-07-01 13:47:32 +08:00 |
|
|
samwaf
|
3c61a639ae
|
feat:per-site csrf origin/referer protection
#844
|
2026-06-30 15:45:50 +08:00 |
|
|
samwaf
|
cda3bd8fa4
|
feat:per-site cookie security hardening
#844
|
2026-06-30 14:38:21 +08:00 |
|
|
samwaf
|
512492e163
|
feat:manage ssl auto load
#815 #842 #843
|
2026-06-29 17:08:53 +08:00 |
|
|
samwaf
|
10174920d6
|
feat:add account rbac
#844
|
2026-06-29 14:05:09 +08:00 |
|
|
samwaf
|
39dffafab6
|
fix: fix the issue of MySql table partitioning not take effect
#IJULAW
|
2026-06-16 11:16:32 +08:00 |
|
|
samwaf
|
17ac5ebbd3
|
feat:add light ai model
#827
|
2026-06-15 17:00:35 +08:00 |
|
|
samwaf
|
4ea423b229
|
feat:strengthen the safety operation of the application management
#823
|
2026-06-09 17:31:53 +08:00 |
|
|
samwaf
|
4028e9a428
|
feat:add application management
#823
|
2026-06-08 16:08:54 +08:00 |
|
|
samwaf
|
31780eb115
|
feat: add host nickname
#IJR74L
|
2026-06-08 09:54:42 +08:00 |
|
|
samwaf
|
7473206f24
|
feat:add domain whitelist
#IJQNEX
|
2026-05-29 15:07:04 +08:00 |
|
|
samwaf
|
b4d527e042
|
feat:add path rule
#579
|
2026-05-14 14:08:42 +08:00 |
|
|
samwaf
|
2001582580
|
feat:owaspset api
#546
|
2026-04-24 16:52:53 +08:00 |
|
|
samwaf
|
fd05e7b3ca
|
feat: add skip global cc
#745
|
2026-04-17 10:14:30 +08:00 |
|
|
samwaf
|
7067b609d2
|
fix:empty
#752
|
2026-04-16 14:41:40 +08:00 |
|
|
samwaf
|
9fc4f18655
|
feat:add notice pre
#727
|
2026-04-15 15:07:23 +08:00 |
|
|
samwaf
|
bc43046321
|
feat: data cleaning strategy
#729
|
2026-04-11 08:17:28 +08:00 |
|
|
samwaf
|
693c0eed6e
|
feat: add safe entry
#IHWKI6
|
2026-04-07 15:15:49 +08:00 |
|