samwaf
619155764f
feat: enhance cc
...
#IK7J58
2026-09-03 11:22:53 +08:00
samwaf
d611961172
feat:add update process
2026-08-31 11:32:14 +08:00
samwaf
b3a998a815
feat:add port protocol
...
#955
2026-08-30 14:39:12 +08:00
samwaf
2f18485946
feat:add host group
...
#980
2026-08-28 17:15:24 +08:00
samwaf
4228b5a5f4
feat: add run diagnostic for troubleshooting CPU/memory usage & del developer tools out of the main repo
2026-08-27 11:32:07 +08:00
samwaf
459c193124
feat:merge manager access with certificate config
2026-08-26 12:52:10 +08:00
samwaf
984e45804b
feat: add local CA certificate management for the console
2026-08-26 09:28:26 +08:00
samwaf
d44f956ff5
feat: negotiate a per-session key for console traffic
2026-08-25 19:50:33 +08:00
samwaf
31a4937636
feat: encrypt stored credentials with a per-instance data key and mask secret fields
2026-08-25 11:39:36 +08:00
samwaf
50127ad8ea
fix: remove the central-management feature
2026-08-24 13:39:05 +08:00
samwaf
77ffa81ef0
fix: validate batch task data source before reading
2026-08-24 09:05:42 +08:00
samwaf
89ae2bad67
feat: show the release version in upgrade notes
2026-08-22 18:31:41 +08:00
samwaf
b3379d4150
fix:ssl export
2026-08-21 21:53:50 +08:00
samwaf
dfc4427cdd
fix: same-period comparison and live QPS trend on the dashboard cards
...
#964
2026-08-21 08:45:31 +08:00
samwafgo
40a2450ae6
Feat ip tag ( #963 )
...
* feat:group risk log rule tags into a searchable sidebar
2026-08-20 17:12:19 +08:00
samwafgo
1a8bf18ac9
fix:login bug ( #961 )
...
#938 #930 #897
2026-08-19 13:58:45 +08:00
samwafgo
a035e768c8
fix:proxy header ( #958 )
...
#956
2026-08-18 17:25:08 +08:00
samwaf
b4cd2e3dad
feat:ssl cert export path
...
#929
2026-08-16 10:58:42 +08:00
samwafgo
25524ec65a
fix:blocking page content priority ( #945 )
...
#IK8KA7
2026-08-14 23:25:20 +08:00
samwaf
10b2fc2319
fix:ws concurrent write
2026-08-13 09:21:41 +08:00
samwaf
d4afca80b9
fix:real ip source config not saved and edgeone default header
2026-08-12 20:50:33 +08:00
samwaf
4b39767c04
fix:remove mmdb
2026-08-12 16:41:30 +08:00
samwaf
8bd938c3cb
feat:threat intel IP exclusion list for false positives
2026-08-11 14:52:20 +08:00
samwaf
cea6dc26f4
feat:add iplookup
2026-08-11 10:36:12 +08:00
samwaf
86409183b5
feat:add host guard
...
#529 #368 #555
2026-08-07 10:38:10 +08:00
samwaf
b6cf76481d
feat:add login tips
...
#924
2026-08-06 18:23:14 +08:00
samwaf
14f6d39f92
fix:system info dialog and ai assistant
2026-08-06 10:47:56 +08:00
samwaf
a12710b28c
feat:add webhook
...
#693
2026-08-05 23:09:22 +08:00
samwaf
88c0cd0516
feat:ip group import
...
#914
2026-08-05 17:04:58 +08:00
samwaf
9b77a6f6bd
feat:notify subscription rate control and message template
...
#822
2026-08-05 14:21:40 +08:00
samwaf
3ef6b4830b
feat:unified access authentication
...
#408
2026-08-05 10:21:43 +08:00
samwaf
7dca0f156e
fix:host change notify
...
#898 #730
2026-08-03 21:02:20 +08:00
samwaf
2a972b9120
feat:add ip group
...
#905 #195
2026-08-03 16:33:22 +08:00
samwaf
87c50bd54b
fix:rule bug
...
#907
2026-08-03 13:34:59 +08:00
samwaf
3a7dc1a6c8
feat:merging
2026-08-03 09:23:20 +08:00
samwaf
f383bd16e6
feat:save visit log column config per account on server
...
#893
2026-07-28 10:36:38 +08:00
samwaf
155a038433
feat:add nickname in weblog list
...
#IK0NJJ
2026-07-27 14:48:54 +08:00
samwaf
e35d318bcb
fix:list rule moved to another site left stale cache on the old site
...
#898
2026-07-27 11:43:25 +08:00
samwaf
08609e819f
fix:site overview GROUP BY breaks on MySQL/PostgreSQL
2026-07-27 10:27:14 +08:00
samwaf
7eedb74c3b
feat:batch import hosts from nginx
...
#881
2026-07-16 10:26:52 +08:00
samwaf
8f3ad4d9c8
fix:docker iptable bug
...
#IK0319
2026-07-14 16:02:19 +08:00
samwaf
d5fc1901e8
feat:postgres
...
#855
2026-07-14 11:33:06 +08:00
samwaf
e52bdc180c
fix:first db bug
2026-07-14 09:14:57 +08:00
samwaf
c7cdbe397a
feat:add AI rule generation, GPT settings, request timeout config and rule chain mode entry
...
#844
2026-07-13 16:43:23 +08:00
samwaf
0b87b371a0
fix(security): gate /debug behind auth+ip-whitelist, CORS origin allowlist with loopback bypass (N8, N9)
2026-07-06 11:41:07 +08:00
samwaf
98035772ca
fix(security): SSRF +OTP rate limit+IP binding+account authorization
2026-07-06 08:48:14 +08:00
samwaf
8aae66efbe
fix(security): validate trusted proxy before honoring client-IP headers on management port
...
- default GCONFIG_MANAGE_PROXY_HEADER to empty; add GCONFIG_MANAGE_TRUSTED_PROXIES
2026-07-03 22:35:59 +08:00
samwaf
8e4286150d
fix(security): structured whitelist for SQL query API (remove raw SQL)
...
- Replace raw SQL execution with a structured query (table/mode/columns/filters/top); backend no longer accepts any SQL string
- Fail-closed table & column whitelist: block sensitive tables (auth/key/cert/config/plugin) and columns (password/secret/token/private/key)
- Block EAV/key-value tables (value/params columns) to prevent plaintext secret leak, e.g. system_configs.value
- Parameterize all filter values via GORM clause expressions; operator whitelist; cap filters/IN length
- Add queryable-schema endpoint + query audit logging; harden GetTableInfo to skip sensitive tables/columns
2026-07-03 16:30:53 +08:00
samwaf
c8dc8853c4
fix(security): bcrypt password hashing + server-side forced password change
...
- Migrate MD5+global-salt hashing to bcrypt with transparent upgrade on login
- Enforce password change in Auth middleware (allow only changepwd/logout/ws)
- Generate random initial admin password on fresh install (data/initial_password.txt)
2026-07-03 14:47:59 +08:00
samwaf
4f8ed193ce
fix:mysql field
...
#854
2026-07-02 13:59:35 +08:00
samwaf