Sora39831 90665c92f4 fix: harden registration with rate limiting, input validation, and security fixes ... - Add per-IP rate limiter middleware (5 req/min) on /register endpoint - Validate username (3-64 chars) and password (8-128 chars) with trim - Use sentinel error ErrUsernameAlreadyExists instead of string matching - Prevent TurnstileSecretKey exposure via admin settings API (json:"-") - Skip json:"-" fields in UpdateAllSetting to avoid overwriting secrets - Add SetTurnstileSecretKey setter for programmatic configuration - Reuse package-level http.Client in Turnstile verification for connection pooling - Add io.LimitReader to cap Turnstile response body size - Log all Turnstile verification error paths for debugging - Add invalidUsername/invalidPassword i18n keys to all 13 locales		2026-04-03 02:02:25 +08:00
..
config.json	dokodemo-door, socks renamed to mixed, tunnel	2025-09-09 13:57:40 +02:00
inbound.go	feat: allow same email across multiple inbounds and auto-add clients on registration	2026-04-03 01:38:31 +08:00
outbound.go	fix security issue	2026-02-09 23:36:10 +01:00
panel.go	docs: add comments for all functions	2025-09-20 09:35:50 +02:00
server.go	v2.8.10	2026-02-11 18:21:43 +01:00
setting.go	fix: harden registration with rate limiting, input validation, and security fixes	2026-04-03 02:02:25 +08:00
setting_test.go	feat: allow same email across multiple inbounds and auto-add clients on registration	2026-04-03 01:38:31 +08:00
tgbot.go	feat(tgbot): send connection links and qrs on client creation (closes #3320)\n\n- Refactored inline keyboards into getCommonClientButtons to respect DRY\n- Extended SubmitAddClient callback handlers to dispatch individual links and QR codes to the bot chat on success. (#3888)	2026-03-17 22:09:49 +01:00
turnstile.go	fix: harden registration with rate limiting, input validation, and security fixes	2026-04-03 02:02:25 +08:00
user.go	fix: harden registration with rate limiting, input validation, and security fixes	2026-04-03 02:02:25 +08:00
warp.go	docs: add comments for all functions	2025-09-20 09:35:50 +02:00
xray.go	Return nil if no error in GetXrayErr	2026-01-13 17:40:52 +01:00
xray_setting.go	feat: migrate settings to JSON file, add Cloudflare SSL in installer	2026-04-02 16:16:52 +08:00