3x-ui/internal/web/controller
PathGao ad288a7ecc
fix(sub): honor trustedProxyCIDRs before forwarded URLs (#6135)
* fix(sub): honor trustedProxyCIDRs before forwarded URLs

* fix(sub): avoid unused trust-setting lookups

Skip the trustedProxyCIDRs lookup when no forwarded header can affect a subscription URL. Keep the shipped proxy default in one exported setting constant and document the subscription-link behavior for custom proxy boundaries.

* fix(frontend): meet config text contrast requirements

Keep compact configuration text readable in the light theme and satisfy the Storybook accessibility check.

---------

Co-authored-by: PathGao <gaoyanbo@gaoyanbodeMacBook-Air.local>
2026-07-29 21:01:59 +02:00
..
api.go fix(api): authenticate GET /panel/api/openapi.json + pin the route registry to the router (#6133) 2026-07-29 08:00:05 +02:00
api_auth_test.go
base.go
client.go feat(api): add GET endpoint to look up clients by Telegram ID (#5945) 2026-07-28 22:38:44 +02:00
dist.go
dist_test.go
group.go
host.go
host_test.go
inbound.go
index.go
login_limiter.go
login_limiter_test.go chore: refresh dependencies, fix Linux tool tasks, modernize Go idioms 2026-07-25 16:08:09 +02:00
node.go fix(nodes): make node API tokens write-only (#5613) 2026-07-23 15:35:11 +02:00
node_credentials_writeonly_test.go fix(nodes): make node API tokens write-only (#5613) 2026-07-23 15:35:11 +02:00
panel_update_test.go
server.go Bug-label issue sweep: 16 fixes (#6083) 2026-07-23 15:34:42 +02:00
setting.go feat(ui): tag settings that sit at their shipped default value (#6128) 2026-07-29 08:03:21 +02:00
setting_test.go
spa.go
spa_test.go
util.go fix(sub): honor trustedProxyCIDRs before forwarded URLs (#6135) 2026-07-29 21:01:59 +02:00
util_test.go
websocket.go
xray_setting.go Bug-label issue sweep: 16 fixes (#6083) 2026-07-23 15:34:42 +02:00