 samwaf
|
a222c70036
|
fix: resolve the management client IP when trusted proxy ranges cover the client itself
#994
|
2026-09-06 15:30:37 +08:00 |
|
|
samwaf
|
c3b263b7f3
|
feat:website password session lifetime and online session management
#987
|
2026-09-06 07:32:04 +08:00 |
|
|
samwaf
|
619155764f
|
feat: enhance cc
#IK7J58
|
2026-09-03 11:22:53 +08:00 |
|
|
samwaf
|
d611961172
|
feat:add update process
|
2026-08-31 11:32:14 +08:00 |
|
|
samwaf
|
b3a998a815
|
feat:add port protocol
#955
|
2026-08-30 14:39:12 +08:00 |
|
|
samwaf
|
2f18485946
|
feat:add host group
#980
|
2026-08-28 17:15:24 +08:00 |
|
|
samwaf
|
4228b5a5f4
|
feat: add run diagnostic for troubleshooting CPU/memory usage & del developer tools out of the main repo
|
2026-08-27 11:32:07 +08:00 |
|
|
samwaf
|
459c193124
|
feat:merge manager access with certificate config
|
2026-08-26 12:52:10 +08:00 |
|
|
samwaf
|
984e45804b
|
feat: add local CA certificate management for the console
|
2026-08-26 09:28:26 +08:00 |
|
|
samwaf
|
d44f956ff5
|
feat: negotiate a per-session key for console traffic
|
2026-08-25 19:50:33 +08:00 |
|
|
samwaf
|
31a4937636
|
feat: encrypt stored credentials with a per-instance data key and mask secret fields
|
2026-08-25 11:39:36 +08:00 |
|
|
samwaf
|
50127ad8ea
|
fix: remove the central-management feature
|
2026-08-24 13:39:05 +08:00 |
|
|
samwaf
|
77ffa81ef0
|
fix: validate batch task data source before reading
|
2026-08-24 09:05:42 +08:00 |
|
|
samwaf
|
89ae2bad67
|
feat: show the release version in upgrade notes
|
2026-08-22 18:31:41 +08:00 |
|
|
samwaf
|
b3379d4150
|
fix:ssl export
|
2026-08-21 21:53:50 +08:00 |
|
|
samwaf
|
dfc4427cdd
|
fix: same-period comparison and live QPS trend on the dashboard cards
#964
|
2026-08-21 08:45:31 +08:00 |
|
|
samwafgo
|
40a2450ae6
|
Feat ip tag (#963)
* feat:group risk log rule tags into a searchable sidebar
|
2026-08-20 17:12:19 +08:00 |
|
|
samwafgo
|
1a8bf18ac9
|
fix:login bug (#961)
#938 #930 #897
|
2026-08-19 13:58:45 +08:00 |
|
|
samwafgo
|
a035e768c8
|
fix:proxy header (#958)
#956
|
2026-08-18 17:25:08 +08:00 |
|
|
samwaf
|
b4cd2e3dad
|
feat:ssl cert export path
#929
|
2026-08-16 10:58:42 +08:00 |
|
|
samwafgo
|
25524ec65a
|
fix:blocking page content priority (#945)
#IK8KA7
|
2026-08-14 23:25:20 +08:00 |
|
|
samwaf
|
10b2fc2319
|
fix:ws concurrent write
|
2026-08-13 09:21:41 +08:00 |
|
|
samwaf
|
d4afca80b9
|
fix:real ip source config not saved and edgeone default header
|
2026-08-12 20:50:33 +08:00 |
|
|
samwaf
|
4b39767c04
|
fix:remove mmdb
|
2026-08-12 16:41:30 +08:00 |
|
|
samwaf
|
8bd938c3cb
|
feat:threat intel IP exclusion list for false positives
|
2026-08-11 14:52:20 +08:00 |
|
|
samwaf
|
cea6dc26f4
|
feat:add iplookup
|
2026-08-11 10:36:12 +08:00 |
|
|
samwaf
|
86409183b5
|
feat:add host guard
#529 #368 #555
|
2026-08-07 10:38:10 +08:00 |
|
|
samwaf
|
b6cf76481d
|
feat:add login tips
#924
|
2026-08-06 18:23:14 +08:00 |
|
|
samwaf
|
14f6d39f92
|
fix:system info dialog and ai assistant
|
2026-08-06 10:47:56 +08:00 |
|
|
samwaf
|
a12710b28c
|
feat:add webhook
#693
|
2026-08-05 23:09:22 +08:00 |
|
|
samwaf
|
88c0cd0516
|
feat:ip group import
#914
|
2026-08-05 17:04:58 +08:00 |
|
|
samwaf
|
9b77a6f6bd
|
feat:notify subscription rate control and message template
#822
|
2026-08-05 14:21:40 +08:00 |
|
|
samwaf
|
3ef6b4830b
|
feat:unified access authentication
#408
|
2026-08-05 10:21:43 +08:00 |
|
|
samwaf
|
7dca0f156e
|
fix:host change notify
#898 #730
|
2026-08-03 21:02:20 +08:00 |
|
|
samwaf
|
2a972b9120
|
feat:add ip group
#905 #195
|
2026-08-03 16:33:22 +08:00 |
|
|
samwaf
|
87c50bd54b
|
fix:rule bug
#907
|
2026-08-03 13:34:59 +08:00 |
|
|
samwaf
|
3a7dc1a6c8
|
feat:merging
|
2026-08-03 09:23:20 +08:00 |
|
|
samwaf
|
f383bd16e6
|
feat:save visit log column config per account on server
#893
|
2026-07-28 10:36:38 +08:00 |
|
|
samwaf
|
155a038433
|
feat:add nickname in weblog list
#IK0NJJ
|
2026-07-27 14:48:54 +08:00 |
|
|
samwaf
|
e35d318bcb
|
fix:list rule moved to another site left stale cache on the old site
#898
|
2026-07-27 11:43:25 +08:00 |
|
|
samwaf
|
08609e819f
|
fix:site overview GROUP BY breaks on MySQL/PostgreSQL
|
2026-07-27 10:27:14 +08:00 |
|
|
samwaf
|
7eedb74c3b
|
feat:batch import hosts from nginx
#881
|
2026-07-16 10:26:52 +08:00 |
|
|
samwaf
|
8f3ad4d9c8
|
fix:docker iptable bug
#IK0319
|
2026-07-14 16:02:19 +08:00 |
|
|
samwaf
|
d5fc1901e8
|
feat:postgres
#855
|
2026-07-14 11:33:06 +08:00 |
|
|
samwaf
|
e52bdc180c
|
fix:first db bug
|
2026-07-14 09:14:57 +08:00 |
|
|
samwaf
|
c7cdbe397a
|
feat:add AI rule generation, GPT settings, request timeout config and rule chain mode entry
#844
|
2026-07-13 16:43:23 +08:00 |
|
|
samwaf
|
0b87b371a0
|
fix(security): gate /debug behind auth+ip-whitelist, CORS origin allowlist with loopback bypass (N8, N9)
|
2026-07-06 11:41:07 +08:00 |
|
|
samwaf
|
98035772ca
|
fix(security): SSRF +OTP rate limit+IP binding+account authorization
|
2026-07-06 08:48:14 +08:00 |
|
|
samwaf
|
8aae66efbe
|
fix(security): validate trusted proxy before honoring client-IP headers on management port
- default GCONFIG_MANAGE_PROXY_HEADER to empty; add GCONFIG_MANAGE_TRUSTED_PROXIES
|
2026-07-03 22:35:59 +08:00 |
|
|
samwaf
|
8e4286150d
|
fix(security): structured whitelist for SQL query API (remove raw SQL)
- Replace raw SQL execution with a structured query (table/mode/columns/filters/top); backend no longer accepts any SQL string
- Fail-closed table & column whitelist: block sensitive tables (auth/key/cert/config/plugin) and columns (password/secret/token/private/key)
- Block EAV/key-value tables (value/params columns) to prevent plaintext secret leak, e.g. system_configs.value
- Parameterize all filter values via GORM clause expressions; operator whitelist; cap filters/IN length
- Add queryable-schema endpoint + query audit logging; harden GetTableInfo to skip sensitive tables/columns
|
2026-07-03 16:30:53 +08:00 |
|