3x-ui/web
farhadh a6a4ffbeab
feat(settings): redact secrets in AllSettingView and add TrustedProxyCIDRs
Introduces AllSettingView which strips tgBotToken, twoFactorToken,
ldapPassword, apiToken and warp/nord secrets before sending them to
the browser, replacing them with boolean hasFoo presence flags. A new
/panel/setting/secret endpoint allows updating individual secrets by
key. Secrets that arrive blank on a save are preserved from the DB
rather than overwritten. Adds TrustedProxyCIDRs as a configurable
setting (defaults to localhost CIDRs). URL fields are validated before
save.
2026-05-11 21:16:22 +02:00
..
controller feat(auth): block panel with default admin/admin credentials and guide credential change 2026-05-11 21:16:22 +02:00
entity feat(settings): redact secrets in AllSettingView and add TrustedProxyCIDRs 2026-05-11 21:16:22 +02:00
global Refactor code and fix linter warnings (#3627) 2026-01-05 05:54:56 +01:00
job feat(nodes): traffic-writer queue, full-mirror sync, WS event fixes 2026-05-10 16:25:23 +02:00
locale v3 2026-05-10 02:13:42 +02:00
middleware v3 2026-05-10 02:13:42 +02:00
network docs: add comments for all functions 2025-09-20 09:35:50 +02:00
runtime feat(nodes): traffic-writer queue, full-mirror sync, WS event fixes 2026-05-10 16:25:23 +02:00
service feat(settings): redact secrets in AllSettingView and add TrustedProxyCIDRs 2026-05-11 21:16:22 +02:00
session refactor(session): store user ID in session instead of full struct 2026-05-11 21:16:22 +02:00
translation update translation 2026-05-11 20:47:49 +02:00
websocket feat(nodes): traffic-writer queue, full-mirror sync, WS event fixes 2026-05-10 16:25:23 +02:00
web.go fix(xray): implement graceful shutdown for xray process and add tests (#4259) 2026-05-11 14:11:40 +02:00