2017 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
Denis Gorelov	313b51f96f	feat: Add random Reality Target/SNI selection from 52 popular services (#3577) ... * feat: Add random Reality Target/SNI selection from 52 popular services - Created reality_targets.js with list of 52 popular services - Updated RealityStreamSettings to use random targets by default - Added UI randomize buttons with sync icon in Reality settings form - Implemented randomizeRealityTarget() method in inbound modal - Replaces hardcoded google.com with diverse global services * fix --------- Co-authored-by: mhsanaei <ho3ein.sanaei@gmail.com>	2025-11-01 13:07:05 +01:00
OleksandrParshyn	020cd63e22	Fix: Graceful Telegram bot shutdown to prevent 409 Conflict (#3580) ... * Fix: Graceful Telegram bot shutdown to prevent 409 Conflict Introduces a `botCancel` context and a global `StopBot()` function to ensure the Telegram bot's Long Polling operation is safely terminated (via context cancellation) before the service restarts. This prevents the "Conflict: another update consumer is running" (409) error upon panel restart. Changes: - Added `botCancel context.CancelFunc` to manage context cancellation. - Implemented global `StopBot()` function. - Updated `Tgbot.Stop()` to call `StopBot()`. - Modified `Tgbot.OnReceive()` to use the new cancellable context for `UpdatesViaLongPolling`. * Fix: Prevent race condition and goroutine leak in TgBot Addresses a critical race condition on the global `botCancel` variable, which could occur if `Tgbot.OnReceive()` was called concurrently (e.g., during rapid panel restarts or unexpected behavior). Changes in tgbot.go: - Added `tgBotMutex sync.Mutex` to ensure thread safety. - Protected `botCancel` creation and assignment in `OnReceive()` using the mutex, and added a check to prevent overwriting an active context, which avoids goroutine leaks. - Protected the cancellation and cleanup logic in `StopBot()` with the mutex. * Refactor: Replace time.Sleep with sync.WaitGroup for reliable TgBot shutdown Replaced the unreliable `time.Sleep(1 * time.Second)` in `service.StopBot()` with `sync.WaitGroup`. This ensures the Long Polling goroutine is explicitly waited for and reliably exits before the panel continues, preventing potential resource leaks and incomplete shutdowns during restarts. Changes: - Added `botWG sync.WaitGroup` variable. - Updated `service.StopBot()` to call `botWG.Wait()` instead of `time.Sleep()`. - Modified `Tgbot.OnReceive()` to correctly use `botWG.Add(1)` and `defer botWG.Done()` within the Long Polling goroutine. - Corrected the goroutine structure in `OnReceive()` to properly encapsulate all message handling logic.	2025-11-01 13:01:44 +01:00
BOplaid	6e46e9b16e	Improve English README (#3579)	2025-11-01 12:48:16 +01:00
mhsanaei	713a7328f6	gofmt	2025-10-21 13:02:55 +02:00
mhsanaei	01d4a7488d	v2.8.5	2025-10-15 11:40:40 +02:00
mhsanaei	2b2ed3349a	Xray-core v25.10.15	2025-10-15 11:40:04 +02:00
mhsanaei	d8523bbdac	fix(import): prevent sqlite disk I/O error by validating temp DB then swapping	2025-10-14 22:03:17 +02:00
Slava M.	8afa39144e	feat: add file logger support (#3575) ... * feat: add backend for file logger	2025-10-09 17:39:29 +02:00
fpointsstar	00baeffe74	Update translate.ru_RU.toml (#3574) ... Fix RU translation for login title: replace “Приветствие!” with “Добро пожаловать!” to match English “Welcome”.	2025-10-07 16:31:32 +02:00
mhsanaei	b578a33518	update dependencies	2025-10-07 13:49:08 +02:00
mhsanaei	8153e0ac05	fragment : MaxSplit	2025-10-07 13:46:30 +02:00
mhsanaei	2eb9d2e2e8	DevTools	2025-10-02 01:47:12 +02:00
Vadim Iskuchekov	a824875c4f	fix: improve error handling in periodic traffic reset job (#3572)	2025-10-01 23:12:09 +02:00
JieXu	cafcb250ec	Add support for OpenSUSE Leap (#3573) ... * Update update.sh * Update install.sh * Update x-ui.sh * Update x-ui.sh	2025-10-01 23:11:37 +02:00
mhsanaei	e7cfee570b	first try native CPU implementation	2025-10-01 20:13:32 +02:00
JieXu	90c3529301	[Security] Replace timestamp-based password generation with random generator (#3571) ... * Update x-ui.sh * Update x-ui.sh * Update x-ui.sh * Update x-ui.sh	2025-10-01 18:37:31 +02:00
konstpic	b65ec83c39	fix: fix delete method (#3569) ... Co-authored-by: Пичугин Константин <k.pichugin@comagic.dev>	2025-09-29 18:16:46 +02:00
konstpic	28a17a80ec	feat: add ldap component (#3568) ... * add ldap component * fix: fix russian comments, tls cert verify default true * feat: remove replaces go mod for local dev	2025-09-28 21:04:54 +02:00
Mikhail Grigorev	3056583388	feat: Add update script (#3555) ... * feat: Add update script * Small fix * Fixed typo * Fixed typo * chmod +x * Update x-ui * Fixed update message * Fixed typo * Added downloading via IPv4 * Remove check_glibc_version * Fixed self destroy * Fixed typo * Fixed self destroy ---------	2025-09-28 14:09:27 +02:00
Дмитрий Олегович Саенко	172f2ddaa7	fix russian translate in tgbot (#3557)	2025-09-25 15:21:40 +02:00
Tara Rostami	d69af328dc	fix: login animation (#3559) ... * Add IPv4 for wget in install * fix: login animation	2025-09-25 15:16:50 +02:00
mhsanaei	ee0e3093ba	Add IPv4 for wget in install	2025-09-25 15:08:13 +02:00
mhsanaei	89def9aee6	fix	2025-09-24 21:30:58 +02:00
mhsanaei	b2b0024648	login: autocomplete password	2025-09-24 20:41:32 +02:00
mhsanaei	5822758b7c	tiny changes	2025-09-24 19:51:01 +02:00
mhsanaei	49430b3991	Update docker.yml	2025-09-24 15:42:01 +02:00
mhsanaei	104526aab2	v2.8.4	2025-09-24 11:47:43 +02:00
mhsanaei	a0c07241c0	minor changes	2025-09-24 11:47:14 +02:00
mhsanaei	adf3242602	bug fix	2025-09-24 11:44:02 +02:00
mhsanaei	3f62592e4b	API improve security: returns 404 for unauthenticated API requests	2025-09-24 11:29:55 +02:00
Дмитрий Олегович Саенко	02bff4db6c	max port to 65535 (#3536) ... * add EXPOSE port in Dockerfile * fix: max port 65 531 -> 65 535 * fix --------- Co-authored-by: mhsanaei <ho3ein.sanaei@gmail.com>	2025-09-23 19:43:56 +02:00
Happ-dev	8ff4e1ff31	Add Happ client export open link (#3542) ... Co-authored-by: y.sivushkin <y.sivushkin@corp.101xp.com>	2025-09-23 16:46:45 +02:00
mhsanaei	26c6438ec2	fix api : subid, uuid from inbound settings	2025-09-23 11:52:40 +02:00
Evgeny Volferts	b3e96230c4	Add Alpine Linux support (#3534) ... * Add Alpine linux support * Fix for reading logs	2025-09-22 21:56:43 +02:00
mhsanaei	1016f3b4f9	fix: outbound address for vless	2025-09-22 00:20:05 +02:00
mhsanaei	020bc9d77c	v2.8.3	2025-09-21 21:20:45 +02:00
mhsanaei	5620d739c6	improved sub: BuildURLs	2025-09-21 21:20:37 +02:00
mhsanaei	d518979e4f	pageSize to 25	2025-09-21 20:47:34 +02:00
mhsanaei	83f8a03b50	TGbot: improved (5x faster)	2025-09-21 19:27:05 +02:00
mhsanaei	b45e63a14a	API: UUID for getClientTraffics	2025-09-21 19:16:54 +02:00
Дмитрий Олегович Саенко	3007bcff97	add EXPOSE port in Dockerfile (#3523)	2025-09-21 19:03:36 +02:00
mhsanaei	55f1d72af5	security fix: Uncontrolled data used in path expression	2025-09-21 18:51:54 +02:00
Sanaei	806ecbd7c5	Merge pull request #3528 from MHSanaei/security ... Security issue fixed	2025-09-21 18:05:26 +02:00
mhsanaei	ae79b43cdb	security fix: Use of insufficient randomness as the key of a cryptographic algorithm	2025-09-21 17:59:17 +02:00
mhsanaei	e64e6327ef	security fix: Uncontrolled data used in path expression	2025-09-21 17:52:18 +02:00
mhsanaei	9f024b9e6a	security fix: Workflow with permissions CWE-275	2025-09-21 17:47:16 +02:00
mhsanaei	eacfbc86b5	security fix: Command built from user-controlled sources CWE-78 ... https://cwe.mitre.org/data/definitions/78.html https://owasp.org/www-community/attacks/Command_Injection	2025-09-21 17:39:30 +02:00
mhsanaei	37c17357fc	undo vnext for vmess	2025-09-20 13:10:57 +02:00
mhsanaei	b35d339665	update dependencies	2025-09-20 09:48:54 +02:00
Tara Rostami	5e7a3db873	Minor Fixes (#3520)	2025-09-20 09:36:56 +02:00