Sanaei 486f66efeb Merge branch 'main' into fix/private-ip-blocked		2026-05-19 15:07:10 +02:00
..
api.go	Feat/multi inbound clients (#4469)	2026-05-19 12:20:24 +02:00
api_docs_test.go	Feat/multi inbound clients (#4469)	2026-05-19 12:20:24 +02:00
base.go	v3	2026-05-10 02:13:42 +02:00
client.go	Feat/multi inbound clients (#4469)	2026-05-19 12:20:24 +02:00
custom_geo.go	v3	2026-05-10 02:13:42 +02:00
dist.go	fix: Add base-path meta tag for Cloudflare Rocket Loader compatibility	2026-05-14 23:37:25 +02:00
inbound.go	Feat/multi inbound clients (#4469)	2026-05-19 12:20:24 +02:00
index.go	fix(auth): invalidate sessions when 2FA is enabled, fix dev 401 loop	2026-05-13 14:08:16 +02:00
login_limiter.go	Implement CSRF protection and security hardening across the application (#4179)	2026-05-07 23:36:11 +02:00
login_limiter_test.go	refactor(websocket): split controller into service + thin controller	2026-05-08 00:00:44 +02:00
node.go	Feat/multi inbound clients (#4469)	2026-05-19 12:20:24 +02:00
server.go	Feat/multi inbound clients (#4469)	2026-05-19 12:20:24 +02:00
setting.go	feat(api-tokens): manage multiple named tokens; add tab/section anchor URLs	2026-05-13 16:34:31 +02:00
util.go	Feat/multi inbound clients (#4469)	2026-05-19 12:20:24 +02:00
util_test.go	Security hardening: sessions, SSRF, CSP nonce, CSRF logout, trusted proxies (#4275)	2026-05-13 12:52:52 +02:00
websocket.go	v3	2026-05-10 02:13:42 +02:00
xray_setting.go	fix: enable user to disable ip security checks using env variable ALLOW_PRIVATE_IPS	2026-05-16 14:15:40 +03:30
xui.go	Feat/multi inbound clients (#4469)	2026-05-19 12:20:24 +02:00