3x-ui/web/translation
Sora39831 90665c92f4 fix: harden registration with rate limiting, input validation, and security fixes
- Add per-IP rate limiter middleware (5 req/min) on /register endpoint
- Validate username (3-64 chars) and password (8-128 chars) with trim
- Use sentinel error ErrUsernameAlreadyExists instead of string matching
- Prevent TurnstileSecretKey exposure via admin settings API (json:"-")
- Skip json:"-" fields in UpdateAllSetting to avoid overwriting secrets
- Add SetTurnstileSecretKey setter for programmatic configuration
- Reuse package-level http.Client in Turnstile verification for connection pooling
- Add io.LimitReader to cap Turnstile response body size
- Log all Turnstile verification error paths for debugging
- Add invalidUsername/invalidPassword i18n keys to all 13 locales
2026-04-03 02:02:25 +08:00
..
translate.ar_EG.toml fix: harden registration with rate limiting, input validation, and security fixes 2026-04-03 02:02:25 +08:00
translate.en_US.toml fix: harden registration with rate limiting, input validation, and security fixes 2026-04-03 02:02:25 +08:00
translate.es_ES.toml fix: harden registration with rate limiting, input validation, and security fixes 2026-04-03 02:02:25 +08:00
translate.fa_IR.toml fix: harden registration with rate limiting, input validation, and security fixes 2026-04-03 02:02:25 +08:00
translate.id_ID.toml fix: harden registration with rate limiting, input validation, and security fixes 2026-04-03 02:02:25 +08:00
translate.ja_JP.toml fix: harden registration with rate limiting, input validation, and security fixes 2026-04-03 02:02:25 +08:00
translate.pt_BR.toml fix: harden registration with rate limiting, input validation, and security fixes 2026-04-03 02:02:25 +08:00
translate.ru_RU.toml fix: harden registration with rate limiting, input validation, and security fixes 2026-04-03 02:02:25 +08:00
translate.tr_TR.toml fix: harden registration with rate limiting, input validation, and security fixes 2026-04-03 02:02:25 +08:00
translate.uk_UA.toml fix: harden registration with rate limiting, input validation, and security fixes 2026-04-03 02:02:25 +08:00
translate.vi_VN.toml fix: harden registration with rate limiting, input validation, and security fixes 2026-04-03 02:02:25 +08:00
translate.zh_CN.toml fix: harden registration with rate limiting, input validation, and security fixes 2026-04-03 02:02:25 +08:00
translate.zh_TW.toml fix: harden registration with rate limiting, input validation, and security fixes 2026-04-03 02:02:25 +08:00