sing-box/docs
世界 90a642ef96
Reject pure-IP rule-set references without match_response
DNS rules referencing rule-sets that contain only ip_cidr predicates
silently stopped matching when legacy DNS mode was disabled, because the
IP-CIDR branch cannot match against an in-flight DNS query. The existing
validation intentionally let every rule_set through on the premise that
mixed sets still work via their non-IP branches, which is only true when
such a branch exists. Track whether a rule-set carries any non-IP-CIDR
predicate and reject pure-IP references the same way bare ip_cidr fields
are already rejected.
2026-04-28 08:04:52 +08:00
..
assets
clients Add package_name_regex route, DNS and headless rule item 2026-04-28 08:04:32 +08:00
configuration Add TLS spoof support 2026-04-28 08:04:51 +08:00
installation Add cloudflared inbound 2026-04-28 08:04:33 +08:00
manual Update uTLS to v1.8.2 2026-01-17 04:54:18 +08:00
changelog.md Add evaluate DNS rule action and related rule items 2026-04-28 08:04:30 +08:00
CNAME
deprecated.md Refactor: HTTP clients, unified HTTP2/QUIC options, Apple engines 2026-04-28 08:04:39 +08:00
deprecated.zh.md Refactor: HTTP clients, unified HTTP2/QUIC options, Apple engines 2026-04-28 08:04:39 +08:00
index.md documentation: Update client status 2024-09-13 10:09:08 +08:00
index.zh.md documentation: Update client status 2024-09-13 10:09:08 +08:00
migration.md Reject pure-IP rule-set references without match_response 2026-04-28 08:04:52 +08:00
migration.zh.md Reject pure-IP rule-set references without match_response 2026-04-28 08:04:52 +08:00
sponsors.md documentation: Remove warp ads 2026-04-20 09:49:39 +08:00
support.md documentation: Remove unused 2024-08-19 06:39:33 +08:00
support.zh.md documentation: Remove unused 2024-08-19 06:39:33 +08:00