3x-ui/web/assets/js
Farhad H. P. Shirvan 10ebc6cbdc
Implement CSRF protection and security hardening across the application (#4179)
* Implement CSRF protection and security hardening across the application

- Added CSRF token handling in axios requests and HTML templates.
- Introduced CSRF middleware to validate tokens for unsafe HTTP methods.
- Implemented login limiter to prevent brute-force attacks.
- Enhanced security headers in middleware for improved response security.
- Updated login notification to include safe metadata without passwords.
- Added tests for CSRF middleware and login limiter functionality.

* fix
2026-05-07 23:36:11 +02:00
..
model refactor(fallbacks): share template, tighter UX, cleaner JSON 2026-05-07 20:27:34 +02:00
util kcp: noise, header-custom, sudoku 2026-04-27 01:28:06 +02:00
axios-init.js Implement CSRF protection and security hardening across the application (#4179) 2026-05-07 23:36:11 +02:00
subscription.js chore: fix shadowrocketUrl client (#4183) 2026-05-07 20:59:10 +02:00
websocket.js ws/inbounds: realtime fixes + perf for 10k+ client inbounds (#4123) 2026-05-05 17:27:49 +02:00