 samwaf
|
8bd938c3cb
|
feat:threat intel IP exclusion list for false positives
|
2026-08-11 14:52:20 +08:00 |
|
|
samwaf
|
cea6dc26f4
|
feat:add iplookup
|
2026-08-11 10:36:12 +08:00 |
|
|
samwaf
|
86409183b5
|
feat:add host guard
#529 #368 #555
|
2026-08-07 10:38:10 +08:00 |
|
|
samwaf
|
b6cf76481d
|
feat:add login tips
#924
|
2026-08-06 18:23:14 +08:00 |
|
|
samwaf
|
14f6d39f92
|
fix:system info dialog and ai assistant
|
2026-08-06 10:47:56 +08:00 |
|
|
samwaf
|
9b77a6f6bd
|
feat:notify subscription rate control and message template
#822
|
2026-08-05 14:21:40 +08:00 |
|
|
samwaf
|
3ef6b4830b
|
feat:unified access authentication
#408
|
2026-08-05 10:21:43 +08:00 |
|
|
samwaf
|
2a972b9120
|
feat:add ip group
#905 #195
|
2026-08-03 16:33:22 +08:00 |
|
|
samwaf
|
3a7dc1a6c8
|
feat:merging
|
2026-08-03 09:23:20 +08:00 |
|
|
samwaf
|
f383bd16e6
|
feat:save visit log column config per account on server
#893
|
2026-07-28 10:36:38 +08:00 |
|
|
samwaf
|
e35d318bcb
|
fix:list rule moved to another site left stale cache on the old site
#898
|
2026-07-27 11:43:25 +08:00 |
|
|
samwaf
|
b354525421
|
feat:per-host outbound HTTP/2 switch
|
2026-07-22 13:52:53 +08:00 |
|
|
samwaf
|
7eedb74c3b
|
feat:batch import hosts from nginx
#881
|
2026-07-16 10:26:52 +08:00 |
|
|
samwaf
|
c7cdbe397a
|
feat:add AI rule generation, GPT settings, request timeout config and rule chain mode entry
#844
|
2026-07-13 16:43:23 +08:00 |
|
|
samwaf
|
0b87b371a0
|
fix(security): gate /debug behind auth+ip-whitelist, CORS origin allowlist with loopback bypass (N8, N9)
|
2026-07-06 11:41:07 +08:00 |
|
|
samwaf
|
8aae66efbe
|
fix(security): validate trusted proxy before honoring client-IP headers on management port
- default GCONFIG_MANAGE_PROXY_HEADER to empty; add GCONFIG_MANAGE_TRUSTED_PROXIES
|
2026-07-03 22:35:59 +08:00 |
|
|
samwaf
|
8e4286150d
|
fix(security): structured whitelist for SQL query API (remove raw SQL)
- Replace raw SQL execution with a structured query (table/mode/columns/filters/top); backend no longer accepts any SQL string
- Fail-closed table & column whitelist: block sensitive tables (auth/key/cert/config/plugin) and columns (password/secret/token/private/key)
- Block EAV/key-value tables (value/params columns) to prevent plaintext secret leak, e.g. system_configs.value
- Parameterize all filter values via GORM clause expressions; operator whitelist; cap filters/IN length
- Add queryable-schema endpoint + query audit logging; harden GetTableInfo to skip sensitive tables/columns
|
2026-07-03 16:30:53 +08:00 |
|
|
samwaf
|
36a083d00b
|
feat:path rule backend protocol, access log switch and response timeout
#857
|
2026-07-02 15:59:11 +08:00 |
|
|
samwaf
|
31b334622e
|
feat:file upload detection config
#844
|
2026-07-02 11:31:43 +08:00 |
|
|
samwaf
|
74dfab253a
|
feat:tamper url extract, batch ops, table filter/sort
#844
|
2026-07-01 16:43:15 +08:00 |
|
|
samwaf
|
d698f88e69
|
feat:web page anti-tamper protection
|
2026-07-01 13:47:32 +08:00 |
|
|
samwaf
|
3c61a639ae
|
feat:per-site csrf origin/referer protection
#844
|
2026-06-30 15:45:50 +08:00 |
|
|
samwaf
|
cda3bd8fa4
|
feat:per-site cookie security hardening
#844
|
2026-06-30 14:38:21 +08:00 |
|
|
samwaf
|
512492e163
|
feat:manage ssl auto load
#815 #842 #843
|
2026-06-29 17:08:53 +08:00 |
|
|
samwaf
|
10174920d6
|
feat:add account rbac
#844
|
2026-06-29 14:05:09 +08:00 |
|
|
samwaf
|
39dffafab6
|
fix: fix the issue of MySql table partitioning not take effect
#IJULAW
|
2026-06-16 11:16:32 +08:00 |
|
|
samwaf
|
17ac5ebbd3
|
feat:add light ai model
#827
|
2026-06-15 17:00:35 +08:00 |
|
|
samwaf
|
4ea423b229
|
feat:strengthen the safety operation of the application management
#823
|
2026-06-09 17:31:53 +08:00 |
|
|
samwaf
|
4028e9a428
|
feat:add application management
#823
|
2026-06-08 16:08:54 +08:00 |
|
|
samwaf
|
31780eb115
|
feat: add host nickname
#IJR74L
|
2026-06-08 09:54:42 +08:00 |
|
|
samwaf
|
7473206f24
|
feat:add domain whitelist
#IJQNEX
|
2026-05-29 15:07:04 +08:00 |
|
|
samwaf
|
b4d527e042
|
feat:add path rule
#579
|
2026-05-14 14:08:42 +08:00 |
|
|
samwaf
|
2001582580
|
feat:owaspset api
#546
|
2026-04-24 16:52:53 +08:00 |
|
|
samwaf
|
fd05e7b3ca
|
feat: add skip global cc
#745
|
2026-04-17 10:14:30 +08:00 |
|
|
samwaf
|
7067b609d2
|
fix:empty
#752
|
2026-04-16 14:41:40 +08:00 |
|
|
samwaf
|
9fc4f18655
|
feat:add notice pre
#727
|
2026-04-15 15:07:23 +08:00 |
|
|
samwaf
|
bc43046321
|
feat: data cleaning strategy
#729
|
2026-04-11 08:17:28 +08:00 |
|
|
samwaf
|
693c0eed6e
|
feat: add safe entry
#IHWKI6
|
2026-04-07 15:15:49 +08:00 |
|
|
samwaf
|
cbf5428d3d
|
feat: add database table information
#740
|
2026-04-07 11:03:37 +08:00 |
|
|
lvshujun
|
e910584cca
|
feat: skip dns local check
|
2026-03-25 15:10:54 +08:00 |
|
|
samwaf
|
3e241ba69e
|
feat:host response compress
#623 #409 #707
|
2026-03-20 15:48:48 +08:00 |
|
|
samwaf
|
8ba73063c8
|
feat:tunnel support ssl
#635
|
2026-03-17 14:31:39 +08:00 |
|
|
samwaf
|
07656678e3
|
feat:add overview
#673
|
2026-03-10 16:54:05 +08:00 |
|
|
samwaf
|
703360d7fe
|
feat:add open platform
#664 #698
|
2026-03-06 17:39:01 +08:00 |
|
|
samwaf
|
90b8962fab
|
feat:custom response
#623
|
2026-02-11 14:20:09 +08:00 |
|
|
samwaf
|
03fa1e80ab
|
feat:ip extract
#549
|
2026-02-09 17:34:37 +08:00 |
|
|
samwaf
|
a1fe250172
|
fix: https jump
#670
|
2026-02-06 10:37:26 +08:00 |
|
|
samwaf
|
f4a2ca306b
|
feat:add rule test
|
2026-02-05 16:07:30 +08:00 |
|
|
samwaf
|
4384e0475e
|
feat:add recipient mail
#646
|
2026-01-30 17:20:41 +08:00 |
|
|
samwaf
|
307daacb64
|
feat: add rule code
#654
|
2026-01-19 16:07:28 +08:00 |
|