samwaf
8caf41247d
update:(20260827) v1.3.24 fix bug
2026-08-27 14:44:38 +08:00
samwafgo
c2ead73f9b
Merge pull request #979 from samwafgo/feat_run_diagnostic
...
feat: add run diagnostic for troubleshooting CPU/memory usage & del d…
2026-08-27 11:37:02 +08:00
samwaf
4228b5a5f4
feat: add run diagnostic for troubleshooting CPU/memory usage & del developer tools out of the main repo
2026-08-27 11:32:07 +08:00
samwaf
f05ffd0a24
ci: speed up the release pipeline and align the Go toolchain
2026-08-26 17:33:50 +08:00
samwaf
4f58345359
feat:modify tips
2026-08-26 17:06:00 +08:00
samwafgo
ac495c03a6
Merge pull request #978 from samwafgo/feat_local_manager
...
feat:merge manager access with certificate config
2026-08-26 12:55:04 +08:00
samwaf
459c193124
feat:merge manager access with certificate config
2026-08-26 12:52:10 +08:00
samwafgo
caca3e251b
Merge pull request #977 from samwafgo/feat_manage_cert
...
feat: add local CA certificate management for the console
2026-08-26 09:31:07 +08:00
samwaf
984e45804b
feat: add local CA certificate management for the console
2026-08-26 09:28:26 +08:00
samwafgo
1c5ba101d9
Merge pull request #976 from samwafgo/feat_transport_v2
...
feat: negotiate a per-session key for console traffic
2026-08-25 19:53:04 +08:00
samwaf
d44f956ff5
feat: negotiate a per-session key for console traffic
2026-08-25 19:50:33 +08:00
samwafgo
ff14c68404
Merge pull request #975 from samwafgo/feat_data_key
...
feat: encrypt stored credentials with a per-instance data key and mas…
2026-08-25 12:31:59 +08:00
samwaf
31a4937636
feat: encrypt stored credentials with a per-instance data key and mask secret fields
2026-08-25 11:39:36 +08:00
samwafgo
67623441c1
Merge pull request #974 from samwafgo/fix_remove_center
...
fix: remove the central-management feature
2026-08-24 13:42:51 +08:00
samwaf
50127ad8ea
fix: remove the central-management feature
2026-08-24 13:39:05 +08:00
samwafgo
48ac3597b0
Merge pull request #971 from samwafgo/fix_batch_task
...
fix: validate batch task data source before reading
2026-08-24 09:06:39 +08:00
samwaf
77ffa81ef0
fix: validate batch task data source before reading
2026-08-24 09:05:42 +08:00
samwafgo
02604d7de7
Merge pull request #970 from samwafgo/feat_impoved_check
...
feat: strengthen WAF detection coverage and gate the new inspection p…
2026-08-23 11:30:33 +08:00
samwaf
24227923e8
feat: strengthen WAF detection coverage and gate the new inspection paths
...
Detection engine:
- Normalize request data (body, cookies, form and JSON values, request headers)
before inspection instead of only the URL query string, so encoded variants
are evaluated consistently.
- Extend XSS / SQLi / command-injection inspection to request bodies and to
custom request headers; bodies and headers are scanned per value rather than
as one blob to keep false positives low.
- Add a configurable body inspection mode (body_detect_mode: observe/block/off,
default observe) so the new deep checks record rather than block until an
operator confirms them, plus body_detect_field_exclude to skip fields that
legitimately carry rich text.
- Keep false positives down on the new paths: skip structured values, require a
corroborating signal before flagging body/header XSS, and leave dual-use
keywords out of the fallback lists.
- Path traversal is now normalized and judged on whether it escapes the site
root instead of matching literally; this also clears a long-standing false
positive on legitimate in-site relative paths. Adds a sensitive-file list.
- Scanner detection now covers all request headers and known probe paths.
Plugins:
- Suspend plugin loading pending signing and admission work. The code path is
retained but gated off, and shipped disabled by default.
Validated against a local test corpus and a 33k real-traffic benchmark:
detection improved across every category while the real-traffic false-positive
count stayed flat.
2026-08-23 11:29:22 +08:00
samwafgo
8c9e2c12c4
Merge pull request #967 from samwafgo/feat_update_tips
...
feat: show the release version in upgrade notes
2026-08-22 18:38:11 +08:00
samwaf
89ae2bad67
feat: show the release version in upgrade notes
2026-08-22 18:31:41 +08:00
samwafgo
88eef34d65
Merge pull request #966 from samwafgo/fix_upload
...
fix: check every backend-resolvable multipart filename to prevent upl…
2026-08-21 23:36:32 +08:00
samwaf
f180074bba
fix: check every backend-resolvable multipart filename to prevent upload extension
2026-08-21 23:32:19 +08:00
samwafgo
71111d7865
fix:ssl export ( #965 )
2026-08-21 22:03:42 +08:00
samwaf
b3379d4150
fix:ssl export
2026-08-21 21:53:50 +08:00
samwaf
dfc4427cdd
fix: same-period comparison and live QPS trend on the dashboard cards
...
#964
2026-08-21 08:45:31 +08:00
samwafgo
40a2450ae6
Feat ip tag ( #963 )
...
* feat:group risk log rule tags into a searchable sidebar
2026-08-20 17:12:19 +08:00
samwafgo
6d0a506b83
feat: scanner detection — inspect User-Agent, case-insensitive, expand fingerprints ( #962 )
2026-08-20 13:30:02 +08:00
samwaf
321be5effb
ci: drop the win7 job's needs on the linux-windows and macos jobs
2026-08-19 17:16:54 +08:00
samwaf
1a3a35fb2a
ci: stop workflows from hanging on apt steps
2026-08-19 16:51:11 +08:00
samwafgo
1a8bf18ac9
fix:login bug ( #961 )
...
#938 #930 #897
2026-08-19 13:58:45 +08:00
samwafgo
095fa3f8de
fix:meter_bug ( #959 )
...
#930
2026-08-19 08:40:51 +08:00
samwafgo
a035e768c8
fix:proxy header ( #958 )
...
#956
2026-08-18 17:25:08 +08:00
samwafgo
6efe28e1ed
fix:sse stream bug ( #957 )
...
#949 #954
2026-08-18 12:53:21 +08:00
xingxing
bec1bacacd
特性：添加IsEnableResponseBuffering字段及相关迁移 ( #953 )
...
* 特性：添加IsEnableResponseBuffering字段及相关迁移
引入了IsEnableResponseBuffering来管理响应缓冲行为。
- 添加了从disable_response_buffering到is_enable_response_buffering的迁移转换。
- 更新了WafHostAddReq和WafHostEditReq，以包含新字段。
- 在WafEngine中实现了基于新配置处理响应缓冲的逻辑。
* 特性：更新主机表迁移，以添加is_enable_response_buffering字段
- 将已弃用的disable_response_buffering字段替换为is_enable_response_buffering。
- 更新了迁移逻辑，以确保对新字段的正确处理和为其设置默认值。
- 删除了与旧字段相关的遗留迁移步骤。
2026-08-18 08:35:34 +08:00
samwaf
b4cd2e3dad
feat:ssl cert export path
...
#929
2026-08-16 10:58:42 +08:00
samwafgo
25524ec65a
fix:blocking page content priority ( #945 )
...
#IK8KA7
2026-08-14 23:25:20 +08:00
samwafgo
d4583a63c7
Fix hostguard win bug ( #944 )
...
* fix:hostguard windows bug
* fix:hostguard windows ban debounce starvation
2026-08-14 10:47:39 +08:00
samwafgo
98b8803acd
feat:add acme log ( #943 )
...
* feat:add acme log
* fix:acme bug
* fix:sslhttp_check config wording
2026-08-13 16:57:35 +08:00
samwafgo
7be2e59779
Merge pull request #942 from samwafgo/fix_ws_concurrent_write
...
fix:ws concurrent write
2026-08-13 09:42:58 +08:00
samwaf
10b2fc2319
fix:ws concurrent write
2026-08-13 09:21:41 +08:00
samwafgo
caa51d90f8
Merge pull request #941 from samwafgo/fix_acme
...
fix:add acme diag
2026-08-13 07:16:28 +08:00
samwaf
f9f6bb2388
fix:add acme diag
2026-08-12 21:51:05 +08:00
samwafgo
668c534bf8
Merge pull request #940 from samwafgo/fix_ip_source_bug
...
fix:real ip source config not saved and edgeone default header
2026-08-12 20:55:32 +08:00
samwaf
d4afca80b9
fix:real ip source config not saved and edgeone default header
2026-08-12 20:50:33 +08:00
samwafgo
faf8d7e344
Merge pull request #939 from samwafgo/fix_remove_mmdb
...
fix:remove mmdb
2026-08-12 16:55:11 +08:00
samwaf
4b39767c04
fix:remove mmdb
2026-08-12 16:41:30 +08:00
samwafgo
41278b4307
Merge pull request #937 from samwafgo/feat_threatip_exclude
...
feat:threat intel IP exclusion list for false positives
2026-08-11 15:03:22 +08:00
samwaf
8bd938c3cb
feat:threat intel IP exclusion list for false positives
2026-08-11 14:52:20 +08:00
samwafgo
1dff238889
Merge pull request #936 from samwafgo/feat_iplookup
...
feat:add iplookup
2026-08-11 11:11:45 +08:00
samwaf