3x-ui/web
Farhad H. P. Shirvan 10ebc6cbdc
Implement CSRF protection and security hardening across the application (#4179)
* Implement CSRF protection and security hardening across the application

- Added CSRF token handling in axios requests and HTML templates.
- Introduced CSRF middleware to validate tokens for unsafe HTTP methods.
- Implemented login limiter to prevent brute-force attacks.
- Enhanced security headers in middleware for improved response security.
- Updated login notification to include safe metadata without passwords.
- Added tests for CSRF middleware and login limiter functionality.

* fix
2026-05-07 23:36:11 +02:00
..
assets Implement CSRF protection and security hardening across the application (#4179) 2026-05-07 23:36:11 +02:00
controller Implement CSRF protection and security hardening across the application (#4179) 2026-05-07 23:36:11 +02:00
entity feat: add configurable auto-restart on client auto-disable 2026-05-04 23:19:25 +02:00
global Refactor code and fix linter warnings (#3627) 2026-01-05 05:54:56 +01:00
html Implement CSRF protection and security hardening across the application (#4179) 2026-05-07 23:36:11 +02:00
job fix(fail2ban): fix banning regression and Docker zero-jail issue 2026-05-07 13:53:34 +02:00
locale update dependencies 2026-03-04 13:05:29 +01:00
middleware Implement CSRF protection and security hardening across the application (#4179) 2026-05-07 23:36:11 +02:00
network docs: add comments for all functions 2025-09-20 09:35:50 +02:00
service Implement CSRF protection and security hardening across the application (#4179) 2026-05-07 23:36:11 +02:00
session Implement CSRF protection and security hardening across the application (#4179) 2026-05-07 23:36:11 +02:00
translation Implement CSRF protection and security hardening across the application (#4179) 2026-05-07 23:36:11 +02:00
websocket ws/inbounds: realtime fixes + perf for 10k+ client inbounds (#4123) 2026-05-05 17:27:49 +02:00
web.go Implement CSRF protection and security hardening across the application (#4179) 2026-05-07 23:36:11 +02:00