opensource/SamWaf
3
0
Fork 0
mirror of https://gitee.com/samwaf/SamWaf.git synced 2026-10-31 10:11:42 +08:00
Code Issues Packages Projects Releases Wiki Activity
1,452 Commits 2 Branches 332 Tags
v1.3.24-beta.13
Commit Graph
248 Commits
Author SHA1 Message Date
samwafgo 40a2450ae6 Feat ip tag (#963) 
* feat:group risk log rule tags into a searchable sidebar
 2026-08-20 17:12:19 +08:00
samwafgo 1a8bf18ac9 fix:login bug (#961) 
#938 #930 #897
 2026-08-19 13:58:45 +08:00
samwafgo a035e768c8 fix:proxy header (#958) 
#956
 2026-08-18 17:25:08 +08:00
samwaf b4cd2e3dad feat:ssl cert export path 
#929
 2026-08-16 10:58:42 +08:00
samwafgo 25524ec65a fix:blocking page content priority (#945) 
#IK8KA7
 2026-08-14 23:25:20 +08:00
samwaf 10b2fc2319 fix:ws concurrent write 2026-08-13 09:21:41 +08:00
samwaf d4afca80b9 fix:real ip source config not saved and edgeone default header 2026-08-12 20:50:33 +08:00
samwaf 4b39767c04 fix:remove mmdb 2026-08-12 16:41:30 +08:00
samwaf 8bd938c3cb feat:threat intel IP exclusion list for false positives 2026-08-11 14:52:20 +08:00
samwaf cea6dc26f4 feat:add iplookup 2026-08-11 10:36:12 +08:00
samwaf 86409183b5 feat:add host guard 
#529 #368 #555
 2026-08-07 10:38:10 +08:00
samwaf b6cf76481d feat:add login tips 
#924
 2026-08-06 18:23:14 +08:00
samwaf 14f6d39f92 fix:system info dialog and ai assistant 2026-08-06 10:47:56 +08:00
samwaf a12710b28c feat:add webhook 
#693
 2026-08-05 23:09:22 +08:00
samwaf 88c0cd0516 feat:ip group import 
#914
 2026-08-05 17:04:58 +08:00
samwaf 9b77a6f6bd feat:notify subscription rate control and message template 
#822
 2026-08-05 14:21:40 +08:00
samwaf 3ef6b4830b feat:unified access authentication 
#408
 2026-08-05 10:21:43 +08:00
samwaf 7dca0f156e fix:host change notify 
#898 #730
 2026-08-03 21:02:20 +08:00
samwaf 2a972b9120 feat:add ip group 
#905 #195
 2026-08-03 16:33:22 +08:00
samwaf 87c50bd54b fix:rule bug 
#907
 2026-08-03 13:34:59 +08:00
samwaf 3a7dc1a6c8 feat:merging 2026-08-03 09:23:20 +08:00
samwaf f383bd16e6 feat:save visit log column config per account on server 
#893
 2026-07-28 10:36:38 +08:00
samwaf 155a038433 feat:add nickname in weblog list 
#IK0NJJ
 2026-07-27 14:48:54 +08:00
samwaf e35d318bcb fix:list rule moved to another site left stale cache on the old site 
#898
 2026-07-27 11:43:25 +08:00
samwaf 08609e819f fix:site overview GROUP BY breaks on MySQL/PostgreSQL 2026-07-27 10:27:14 +08:00
samwaf 7eedb74c3b feat:batch import hosts from nginx 
#881
 2026-07-16 10:26:52 +08:00
samwaf 8f3ad4d9c8 fix:docker iptable bug 
#IK0319
 2026-07-14 16:02:19 +08:00
samwaf d5fc1901e8 feat:postgres 
#855
 2026-07-14 11:33:06 +08:00
samwaf e52bdc180c fix:first db bug 2026-07-14 09:14:57 +08:00
samwaf c7cdbe397a feat:add AI rule generation, GPT settings, request timeout config and rule chain mode entry 
#844
 2026-07-13 16:43:23 +08:00
samwaf 0b87b371a0 fix(security): gate /debug behind auth+ip-whitelist, CORS origin allowlist with loopback bypass (N8, N9) 2026-07-06 11:41:07 +08:00
samwaf 98035772ca fix(security): SSRF +OTP rate limit+IP binding+account authorization 2026-07-06 08:48:14 +08:00
samwaf 8aae66efbe fix(security): validate trusted proxy before honoring client-IP headers on management port 
- default GCONFIG_MANAGE_PROXY_HEADER to empty; add GCONFIG_MANAGE_TRUSTED_PROXIES
 2026-07-03 22:35:59 +08:00
samwaf 8e4286150d fix(security): structured whitelist for SQL query API (remove raw SQL) 
- Replace raw SQL execution with a structured query (table/mode/columns/filters/top); backend no longer accepts any SQL string
- Fail-closed table & column whitelist: block sensitive tables (auth/key/cert/config/plugin) and columns (password/secret/token/private/key)
- Block EAV/key-value tables (value/params columns) to prevent plaintext secret leak, e.g. system_configs.value
- Parameterize all filter values via GORM clause expressions; operator whitelist; cap filters/IN length
- Add queryable-schema endpoint + query audit logging; harden GetTableInfo to skip sensitive tables/columns
 2026-07-03 16:30:53 +08:00
samwaf c8dc8853c4 fix(security): bcrypt password hashing + server-side forced password change 
- Migrate MD5+global-salt hashing to bcrypt with transparent upgrade on login
- Enforce password change in Auth middleware (allow only changepwd/logout/ws)
- Generate random initial admin password on fresh install (data/initial_password.txt)
 2026-07-03 14:47:59 +08:00
samwaf 4f8ed193ce fix:mysql field 
#854
 2026-07-02 13:59:35 +08:00
samwaf 74dfab253a feat:tamper url extract, batch ops, table filter/sort 
#844
 2026-07-01 16:43:15 +08:00
samwaf d698f88e69 feat:web page anti-tamper protection 2026-07-01 13:47:32 +08:00
samwaf 512492e163 feat:manage ssl auto load 
#815 #842 #843
 2026-06-29 17:08:53 +08:00
samwaf 10174920d6 feat:add account rbac 
#844
 2026-06-29 14:05:09 +08:00
samwaf a4aa6d8b9c fix:ipdb save bug 
#840
 2026-06-29 09:03:16 +08:00
samwaf 39dffafab6 fix: fix the issue of MySql table partitioning not take effect 
#IJULAW
 2026-06-16 11:16:32 +08:00
samwaf 17ac5ebbd3 feat:add light ai model 
#827
 2026-06-15 17:00:35 +08:00
samwaf 4ea423b229 feat:strengthen the safety operation of the application management 
#823
 2026-06-09 17:31:53 +08:00
samwaf 7a53b6779d fix:when deleting the application,it should be disabled 
#823
 2026-06-09 09:23:30 +08:00
samwaf 4028e9a428 feat:add application management 
#823
 2026-06-08 16:08:54 +08:00
samwaf 31780eb115 feat: add host nickname 
#IJR74L
 2026-06-08 09:54:42 +08:00
samwaf d571e197fd feat:support ipdb 
#809
 2026-06-03 13:29:34 +08:00
samwaf 7473206f24 feat:add domain whitelist 
#IJQNEX
 2026-05-29 15:07:04 +08:00
samwaf 261d2f3865 fix:weblog slow 
#782
 2026-05-26 11:39:45 +08:00