root e035fb07a9 fix: trust Cloudflare CF-Connecting-IP for IP extraction ... When behind Cloudflare CDN, RemoteAddr shows CF's IP, breaking rate limiting and logging. Trust CF-Connecting-IP (set by CF, cannot be spoofed by clients) and fall back to RemoteAddr for direct connections.		2026-04-25 11:45:07 +08:00
..
access_control_test.go	Harden admin access for panel APIs	2026-04-06 22:12:38 +08:00
api.go	style: apply gofmt formatting	2026-04-24 17:44:02 +08:00
base.go	feat: add admin user management	2026-04-04 14:59:40 +08:00
inbound.go	Harden admin access for panel APIs	2026-04-06 22:12:38 +08:00
index.go	fix: add login rate limiting and prevent IP spoofing via headers	2026-04-25 11:43:03 +08:00
node.go	fix: node config save, dbType mismatch, and dark theme support	2026-04-25 10:19:41 +08:00
server.go	Refactor code and fix linter warnings (#3627)	2026-01-05 05:54:56 +01:00
setting.go	Harden admin access for panel APIs	2026-04-06 22:12:38 +08:00
user.go	fix(user): sync-remove inbound clients when deleting managed user	2026-04-05 03:52:41 +08:00
util.go	fix: trust Cloudflare CF-Connecting-IP for IP extraction	2026-04-25 11:45:07 +08:00
websocket.go	feat: Add WebSocket support for real-time updates and enhance VLESS settings (#3605)	2026-01-03 05:26:00 +01:00
xray_setting.go	fix security issue	2026-02-09 23:36:10 +01:00
xui.go	feat: register NodeController routes and nodes page	2026-04-24 17:08:52 +08:00