MHSanaei 18349c36ac fix(tgbot): require admin for privileged callbacks, not just the first switch ...

answerCallback wraps only its first callback switch in an isAdmin guard; the
second switch (server usage, inbound/online enumeration, database backup export,
ban logs, mass traffic reset, client creation) ran for every caller. Telegram
delivers a callback with the tapping user's id, so a non-admin who can see an
admin's inline keyboard — as when the bot runs in a group — could tap Backup and
receive the full database and config, or reset all traffic. Default-deny before
the second switch: a non-admin may only run the per-user client_* callbacks that
resolve their own data from their Telegram id.

2026-07-15 04:27:38 +02:00

..

config

v3.5.0

2026-07-12 22:08:19 +02:00

database

fix(db): mark the IP-limit cleanup seeder done on a fresh install

2026-07-15 03:52:15 +02:00

eventbus

style: adopt golangci-lint v2 and resolve all findings

2026-06-27 15:42:22 +02:00

logger

fix(inbounds): apply runtime changes after the DB commit (#5768)

2026-07-08 22:12:28 +02:00

mtproto

refactor: modernize Go with strings.SplitSeq and maps.Copy

2026-07-08 22:10:54 +02:00

sub

fix(sub): drop empty remark segments instead of leaving a stray separator

2026-07-15 02:56:42 +02:00

tunnelmonitor

style: adopt golangci-lint v2 and resolve all findings

2026-06-27 15:42:22 +02:00

util

fix(link): honor the vmess ws path and hysteria2 vcn params on import

2026-07-15 02:52:09 +02:00

web

fix(tgbot): require admin for privileged callbacks, not just the first switch

2026-07-15 04:27:38 +02:00

xray

fix(xray): synchronize the process version and apiPort fields

2026-07-15 03:33:38 +02:00