3x-ui/web/controller
Frew777 0f7cbb3f2a
Fix plaintext password logging in failed login attempts
This PR fixes security issue #3644 by masking passwords in logs and Telegram notifications.
Passwords are no longer stored or transmitted in plaintext, reducing the risk of credential leakage.

Fixes #3644
2026-01-09 04:05:30 +03:00
..
api.go API improve security: returns 404 for unauthenticated API requests 2025-09-24 11:29:55 +02:00
base.go docs: add comments for all functions 2025-09-20 09:35:50 +02:00
inbound.go feat: Add WebSocket support for real-time updates and enhance VLESS settings (#3605) 2026-01-03 05:26:00 +01:00
index.go Fix plaintext password logging in failed login attempts 2026-01-09 04:05:30 +03:00
server.go Refactor code and fix linter warnings (#3627) 2026-01-05 05:54:56 +01:00
setting.go docs: add comments for all functions 2025-09-20 09:35:50 +02:00
util.go docs: add comments for all functions 2025-09-20 09:35:50 +02:00
websocket.go feat: Add WebSocket support for real-time updates and enhance VLESS settings (#3605) 2026-01-03 05:26:00 +01:00
xray_setting.go docs: add comments for all functions 2025-09-20 09:35:50 +02:00
xui.go API improve security: returns 404 for unauthenticated API requests 2025-09-24 11:29:55 +02:00