3x-ui/web/html
Farhad H. P. Shirvan 10ebc6cbdc
Implement CSRF protection and security hardening across the application (#4179)
* Implement CSRF protection and security hardening across the application

- Added CSRF token handling in axios requests and HTML templates.
- Introduced CSRF middleware to validate tokens for unsafe HTTP methods.
- Implemented login limiter to prevent brute-force attacks.
- Enhanced security headers in middleware for improved response security.
- Updated login notification to include safe metadata without passwords.
- Added tests for CSRF middleware and login limiter functionality.

* fix
2026-05-07 23:36:11 +02:00
..
common Implement CSRF protection and security hardening across the application (#4179) 2026-05-07 23:36:11 +02:00
component fix design 2026-05-06 17:12:08 +02:00
form refactor(fallbacks): share template, tighter UX, cleaner JSON 2026-05-07 20:27:34 +02:00
modals refactor(xhttp): split fields by direction, expand outbound coverage 2026-05-07 19:26:40 +02:00
settings outbound: mobile style 2026-05-06 13:27:40 +02:00
inbounds.html fix: filter view in mobile 2026-05-06 14:45:46 +02:00
index.html fix(panel-update): poll for restart, fix dark-mode version label 2026-05-07 20:55:22 +02:00
login.html fix(security): sanitize remote IP headers and escape log viewer output 2026-05-04 16:39:29 +02:00
settings.html fix(security): sanitize remote IP headers and escape log viewer output 2026-05-04 16:39:29 +02:00
xray.html outbound: mobile style 2026-05-06 13:27:40 +02:00