samwaf
4228b5a5f4
feat: add run diagnostic for troubleshooting CPU/memory usage & del developer tools out of the main repo
2026-08-27 11:32:07 +08:00
samwaf
d44f956ff5
feat: negotiate a per-session key for console traffic
2026-08-25 19:50:33 +08:00
samwaf
31a4937636
feat: encrypt stored credentials with a per-instance data key and mask secret fields
2026-08-25 11:39:36 +08:00
samwaf
50127ad8ea
fix: remove the central-management feature
2026-08-24 13:39:05 +08:00
samwaf
77ffa81ef0
fix: validate batch task data source before reading
2026-08-24 09:05:42 +08:00
samwaf
89ae2bad67
feat: show the release version in upgrade notes
2026-08-22 18:31:41 +08:00
samwaf
b3379d4150
fix:ssl export
2026-08-21 21:53:50 +08:00
samwaf
dfc4427cdd
fix: same-period comparison and live QPS trend on the dashboard cards
...
#964
2026-08-21 08:45:31 +08:00
samwafgo
40a2450ae6
Feat ip tag ( #963 )
...
* feat:group risk log rule tags into a searchable sidebar
2026-08-20 17:12:19 +08:00
samwafgo
1a8bf18ac9
fix:login bug ( #961 )
...
#938 #930 #897
2026-08-19 13:58:45 +08:00
samwafgo
a035e768c8
fix:proxy header ( #958 )
...
#956
2026-08-18 17:25:08 +08:00
xingxing
bec1bacacd
特性：添加IsEnableResponseBuffering字段及相关迁移 ( #953 )
...
* 特性：添加IsEnableResponseBuffering字段及相关迁移
引入了IsEnableResponseBuffering来管理响应缓冲行为。
- 添加了从disable_response_buffering到is_enable_response_buffering的迁移转换。
- 更新了WafHostAddReq和WafHostEditReq，以包含新字段。
- 在WafEngine中实现了基于新配置处理响应缓冲的逻辑。
* 特性：更新主机表迁移，以添加is_enable_response_buffering字段
- 将已弃用的disable_response_buffering字段替换为is_enable_response_buffering。
- 更新了迁移逻辑，以确保对新字段的正确处理和为其设置默认值。
- 删除了与旧字段相关的遗留迁移步骤。
2026-08-18 08:35:34 +08:00
samwaf
b4cd2e3dad
feat:ssl cert export path
...
#929
2026-08-16 10:58:42 +08:00
samwafgo
25524ec65a
fix:blocking page content priority ( #945 )
...
#IK8KA7
2026-08-14 23:25:20 +08:00
samwaf
d4afca80b9
fix:real ip source config not saved and edgeone default header
2026-08-12 20:50:33 +08:00
samwaf
8bd938c3cb
feat:threat intel IP exclusion list for false positives
2026-08-11 14:52:20 +08:00
samwaf
cea6dc26f4
feat:add iplookup
2026-08-11 10:36:12 +08:00
samwaf
461e0eb991
fix:firewall bug
2026-08-10 17:08:53 +08:00
samwaf
86409183b5
feat:add host guard
...
#529 #368 #555
2026-08-07 10:38:10 +08:00
samwaf
b6cf76481d
feat:add login tips
...
#924
2026-08-06 18:23:14 +08:00
samwaf
14f6d39f92
fix:system info dialog and ai assistant
2026-08-06 10:47:56 +08:00
samwaf
4cb0500076
fix:threatip sync bug
2026-08-05 19:04:01 +08:00
samwaf
9b77a6f6bd
feat:notify subscription rate control and message template
...
#822
2026-08-05 14:21:40 +08:00
samwaf
3ef6b4830b
feat:unified access authentication
...
#408
2026-08-05 10:21:43 +08:00
samwaf
2a972b9120
feat:add ip group
...
#905 #195
2026-08-03 16:33:22 +08:00
samwaf
87c50bd54b
fix:rule bug
...
#907
2026-08-03 13:34:59 +08:00
samwaf
3a7dc1a6c8
feat:merging
2026-08-03 09:23:20 +08:00
samwaf
f383bd16e6
feat:save visit log column config per account on server
...
#893
2026-07-28 10:36:38 +08:00
samwaf
155a038433
feat:add nickname in weblog list
...
#IK0NJJ
2026-07-27 14:48:54 +08:00
samwaf
e35d318bcb
fix:list rule moved to another site left stale cache on the old site
...
#898
2026-07-27 11:43:25 +08:00
samwaf
b354525421
feat:per-host outbound HTTP/2 switch
2026-07-22 13:52:53 +08:00
samwaf
127457eb1c
fix: worker crash on first-time SSL certificate application
...
#885
2026-07-17 20:16:23 +08:00
samwaf
7eedb74c3b
feat:batch import hosts from nginx
...
#881
2026-07-16 10:26:52 +08:00
samwaf
c7cdbe397a
feat:add AI rule generation, GPT settings, request timeout config and rule chain mode entry
...
#844
2026-07-13 16:43:23 +08:00
samwaf
0b87b371a0
fix(security): gate /debug behind auth+ip-whitelist, CORS origin allowlist with loopback bypass (N8, N9)
2026-07-06 11:41:07 +08:00
samwaf
8aae66efbe
fix(security): validate trusted proxy before honoring client-IP headers on management port
...
- default GCONFIG_MANAGE_PROXY_HEADER to empty; add GCONFIG_MANAGE_TRUSTED_PROXIES
2026-07-03 22:35:59 +08:00
samwaf
8e4286150d
fix(security): structured whitelist for SQL query API (remove raw SQL)
...
- Replace raw SQL execution with a structured query (table/mode/columns/filters/top); backend no longer accepts any SQL string
- Fail-closed table & column whitelist: block sensitive tables (auth/key/cert/config/plugin) and columns (password/secret/token/private/key)
- Block EAV/key-value tables (value/params columns) to prevent plaintext secret leak, e.g. system_configs.value
- Parameterize all filter values via GORM clause expressions; operator whitelist; cap filters/IN length
- Add queryable-schema endpoint + query audit logging; harden GetTableInfo to skip sensitive tables/columns
2026-07-03 16:30:53 +08:00
samwaf
c8dc8853c4
fix(security): bcrypt password hashing + server-side forced password change
...
- Migrate MD5+global-salt hashing to bcrypt with transparent upgrade on login
- Enforce password change in Auth middleware (allow only changepwd/logout/ws)
- Generate random initial admin password on fresh install (data/initial_password.txt)
2026-07-03 14:47:59 +08:00
samwaf
36a083d00b
feat:path rule backend protocol, access log switch and response timeout
...
#857
2026-07-02 15:59:11 +08:00
samwaf
4f8ed193ce
fix:mysql field
...
#854
2026-07-02 13:59:35 +08:00
samwaf
31b334622e
feat:file upload detection config
...
#844
2026-07-02 11:31:43 +08:00
samwaf
74dfab253a
feat:tamper url extract, batch ops, table filter/sort
...
#844
2026-07-01 16:43:15 +08:00
samwaf
d698f88e69
feat:web page anti-tamper protection
2026-07-01 13:47:32 +08:00
samwaf
3c61a639ae
feat:per-site csrf origin/referer protection
...
#844
2026-06-30 15:45:50 +08:00
samwaf
cda3bd8fa4
feat:per-site cookie security hardening
...
#844
2026-06-30 14:38:21 +08:00
samwaf
512492e163
feat:manage ssl auto load
...
#815 #842 #843
2026-06-29 17:08:53 +08:00
samwaf
10174920d6
feat:add account rbac
...
#844
2026-06-29 14:05:09 +08:00
samwaf
72495e9b2e
feat: support zero-downtime host configuration hot reload
...
#834
2026-06-22 10:22:47 +08:00
samwaf
39dffafab6
fix: fix the issue of MySql table partitioning not take effect
...
#IJULAW
2026-06-16 11:16:32 +08:00
samwaf
17ac5ebbd3
feat:add light ai model
...
#827
2026-06-15 17:00:35 +08:00
samwaf