samwaf
a222c70036
fix: resolve the management client IP when trusted proxy ranges cover the client itself
...
#994
2026-09-06 15:30:37 +08:00
samwaf
dbe30c74cf
fix: honor security.outbound_allowed_hosts for notification channel webhooks
...
#990
2026-09-04 13:49:04 +08:00
samwaf
b3a998a815
feat:add port protocol
...
#955
2026-08-30 14:39:12 +08:00
samwaf
4f58345359
feat:modify tips
2026-08-26 17:06:00 +08:00
samwaf
459c193124
feat:merge manager access with certificate config
2026-08-26 12:52:10 +08:00
samwaf
984e45804b
feat: add local CA certificate management for the console
2026-08-26 09:28:26 +08:00
samwaf
77ffa81ef0
fix: validate batch task data source before reading
2026-08-24 09:05:42 +08:00
samwaf
b3379d4150
fix:ssl export
2026-08-21 21:53:50 +08:00
samwafgo
1a8bf18ac9
fix:login bug ( #961 )
...
#938 #930 #897
2026-08-19 13:58:45 +08:00
samwaf
b4cd2e3dad
feat:ssl cert export path
...
#929
2026-08-16 10:58:42 +08:00
samwafgo
98b8803acd
feat:add acme log ( #943 )
...
* feat:add acme log
* fix:acme bug
* fix:sslhttp_check config wording
2026-08-13 16:57:35 +08:00
samwaf
4b39767c04
fix:remove mmdb
2026-08-12 16:41:30 +08:00
samwaf
b6cf76481d
feat:add login tips
...
#924
2026-08-06 18:23:14 +08:00
samwaf
14f6d39f92
fix:system info dialog and ai assistant
2026-08-06 10:47:56 +08:00
samwaf
2a972b9120
feat:add ip group
...
#905 #195
2026-08-03 16:33:22 +08:00
samwaf
87c50bd54b
fix:rule bug
...
#907
2026-08-03 13:34:59 +08:00
samwaf
3a7dc1a6c8
feat:merging
2026-08-03 09:23:20 +08:00
samwaf
c7cdbe397a
feat:add AI rule generation, GPT settings, request timeout config and rule chain mode entry
...
#844
2026-07-13 16:43:23 +08:00
samwaf
98035772ca
fix(security): SSRF +OTP rate limit+IP binding+account authorization
2026-07-06 08:48:14 +08:00
samwaf
8aae66efbe
fix(security): validate trusted proxy before honoring client-IP headers on management port
...
- default GCONFIG_MANAGE_PROXY_HEADER to empty; add GCONFIG_MANAGE_TRUSTED_PROXIES
2026-07-03 22:35:59 +08:00
samwaf
c8dc8853c4
fix(security): bcrypt password hashing + server-side forced password change
...
- Migrate MD5+global-salt hashing to bcrypt with transparent upgrade on login
- Enforce password change in Auth middleware (allow only changepwd/logout/ws)
- Generate random initial admin password on fresh install (data/initial_password.txt)
2026-07-03 14:47:59 +08:00
samwaf
4f8ed193ce
fix:mysql field
...
#854
2026-07-02 13:59:35 +08:00
samwaf
10174920d6
feat:add account rbac
...
#844
2026-06-29 14:05:09 +08:00
samwaf
2f6b0d39c2
feat:manage proxy header
...
#781
2026-05-06 15:09:55 +08:00
samwaf
d67700d17e
feat:add zstd compress
...
#734
2026-03-31 13:48:00 +08:00
samwafgo
da2ed94411
Merge pull request #725 from Lvshujun0918/main
...
feat: skip dns local check
2026-03-27 13:53:52 +08:00
lvshujun
0f3eb7a956
fix: remove unused err check
2026-03-27 12:38:49 +08:00
yinyutao
95e9625184
feat(utils): add WASM content type support to HTTP checker
2026-03-27 11:25:29 +08:00
lvshujun
05f3454d69
fix: remove unused err check
2026-03-26 12:48:41 +08:00
lvshujun
4f2aa59da7
fix: remove DiagnoseDomainNS
2026-03-26 12:48:15 +08:00
lvshujun
38e242e5c7
Add dns check time
...
Add log output
Remove old env
2026-03-25 18:24:26 +08:00
lvshujun
e910584cca
feat: skip dns local check
2026-03-25 15:10:54 +08:00
samwaf
a19bde6412
feat:ip location
...
#628
2026-02-11 09:42:50 +08:00
samwaf
3ed0058f2a
feat:rule function
2026-02-06 16:37:47 +08:00
samwaf
553c6c26a0
fix:xff ipv6
...
#666
2026-02-02 14:25:06 +08:00
samwaf
fd662be3b2
feat:add zerossl
...
#641
2026-01-12 17:23:32 +08:00
samwaf
970d51a80e
feat: add issuer field to 2fa
...
#637
2026-01-09 11:19:18 +08:00
samwaf
3c5be933fd
feat:support ip ssl
...
#591
2026-01-07 16:23:13 +08:00
samwaf
f3460580c6
security:samwaf url
...
#606
2026-01-05 13:40:02 +08:00
samwaf
d90a7c717e
feat:rule support disabled
...
#586
2025-12-26 10:24:20 +08:00
samwaf
58f511057f
fix:response img
...
#IDBKKM
2025-12-15 16:12:55 +08:00
samwaf
117a94f4a7
fix:debain run failed
...
#563
2025-12-05 17:15:18 +08:00
samwaf
8195f20d34
feat:remove ldp debug info
2025-11-05 14:00:17 +08:00
samwaf
b6aadd8fab
feat:add anticc condition
...
thanks @blue991989
#500
2025-11-05 13:53:17 +08:00
954437801
ca8e7b9475
修复：增加检查accept-ranges头是否为为bytes
...
检查返回内容，accept-ranges头，如果为bytes，则表示支持断点续传，是静态资源
2025-10-10 20:47:08 +08:00
954437801
e09bcca13d
增加 附件下载类型
...
防止 大文件下载，未判断为附件，导致规则应用，导致卡死
2025-10-10 09:47:39 +08:00
samwaf
92734cf723
feat:add baidu cloud
...
#453
2025-09-28 15:56:16 +08:00
samwaf
1c015706db
feat:add rule header
...
#422
2025-09-26 08:40:41 +08:00
samwaf
805265a488
feat:customize acme server
...
#426
2025-08-27 11:10:06 +08:00
samwaf
84629c1d30
fix:download apk error
...
#ICS3SZ
2025-08-11 09:20:20 +08:00
samwaf