3x-ui

mirror of https://github.com/MHSanaei/3x-ui.git synced 2026-09-27 20:26:42 +08:00

Files

T

mrchatam 169cd86e00 fix(sub): never use X-Real-IP as the subscription host (#6608 )

ResolveRequest and the panel's resolveHost fell back to X-Real-IP for the host when a trusted proxy sent no X-Forwarded-Host. X-Real-IP names the visitor, so behind nginx with only that header set, subscription and exported links advertised the subscriber's own public IP as the server.

The host now comes from a trusted X-Forwarded-Host, else the dialed request Host. X-Real-IP stays a client-IP source only.

Fixes #6589.

2026-09-26 21:13:46 +02:00

build_urls_test.go

…

calendar_expire_test.go

feat(sub): add opt-in month-end expiry presentation (#6517 )

2026-09-14 12:10:25 +02:00

calendar_expire.go

feat(sub): add opt-in month-end expiry presentation (#6517 )

2026-09-14 12:10:25 +02:00

characterization_test.go

…

clash_external_quota_test.go

fix(sub): drop external Clash shadowsocks nodes the panel cannot express (#6508 )

2026-09-13 20:01:58 +02:00

clash_external_shadowsocks_test.go

fix(sub): drop external Clash shadowsocks nodes the panel cannot express (#6508 )

2026-09-13 20:01:58 +02:00

clash_external_vless_test.go

fix(sub): preserve external VLESS encryption in Clash subscriptions (#6576 )

2026-09-26 20:31:50 +02:00

clash_external.go

fix(sub): preserve external VLESS encryption in Clash subscriptions (#6576 )

2026-09-26 20:31:50 +02:00

clash_info_node_test.go

feat(sub): add dummy info node and status configs for subscriptions (#6412 )

2026-09-08 17:14:01 +02:00

clash_service_test.go

fix(sub): emit Hysteria certificate pin for Mihomo (#6651 )

2026-09-26 20:31:42 +02:00

clash_service.go

fix(sub): emit Hysteria certificate pin for Mihomo (#6651 )

2026-09-26 20:31:42 +02:00

clash_yaml_test.go

style: drop the line comments added with the triage fixes

2026-07-27 14:37:57 +02:00

clash_yaml.go

style: drop the line comments added with the triage fixes

2026-07-27 14:37:57 +02:00

controller_test.go

feat(sub): add legacy Clash subscription endpoint (#6338 )

2026-09-10 21:58:55 +02:00

controller.go

feat(sub): redesign the subscription page around usage, tabs and app imports

2026-09-16 01:55:56 +02:00

default_json_test.go

fix(sub): drop legacy freedom.domainStrategy from JSON sub template (#6609 )

2026-09-26 21:13:39 +02:00

default.json

fix(sub): drop legacy freedom.domainStrategy from JSON sub template (#6609 )

2026-09-26 21:13:39 +02:00

dist.go

feat(sub): add raw subscription download actions (#6017 )

2026-07-21 15:52:33 +02:00

endpoint_test.go

feat(sub): refine Happ routing presets, serverDescription escaping, and auto-detect placement (#6488 )

2026-09-13 12:53:57 +02:00

endpoint.go

feat(sub): refine Happ routing presets, serverDescription escaping, and auto-detect placement (#6488 )

2026-09-13 12:53:57 +02:00

export_all_links_test.go

fix(inbounds): serve fresh client UUIDs for list and allLinks (#6458 )

2026-09-12 11:12:13 +02:00

external_config_test.go

Add per-client external link controls (#5650 )

2026-08-18 13:55:04 +02:00

external_config.go

Feature/fix external subscription client expiry (#6333 )

2026-09-03 22:32:05 +02:00

external_hwid_test.go

fix(sub): send stable X-HWID on external subscription fetch (#6567 )

2026-09-16 12:16:26 +02:00

external_only_sub_test.go

feat(sub): bake Happ/INCY routing profiles into the JSON subscription (#6402 )

2026-09-10 17:05:54 +02:00

external_subscription_test.go

Add per-client external link controls (#5650 )

2026-08-18 13:55:04 +02:00

external_subscription.go

fix(sub): send stable X-HWID on external subscription fetch (#6567 )

2026-09-16 12:16:26 +02:00

forwarded_trust_test.go

fix(sub): never use X-Real-IP as the subscription host (#6608 )

2026-09-26 21:13:46 +02:00

forwarded_trust.go

fix(sub): honor trustedProxyCIDRs before forwarded URLs (#6135 )

2026-07-29 21:01:59 +02:00

happ_test.go

feat(sub): refine Happ routing presets, serverDescription escaping, and auto-detect placement (#6488 )

2026-09-13 12:53:57 +02:00

happ.go

feat(sub): refine Happ routing presets, serverDescription escaping, and auto-detect placement (#6488 )

2026-09-13 12:53:57 +02:00

host_sub_test.go

feat(hosts): add a cipher suites override and accept custom suites

2026-09-16 11:56:20 +02:00

host_sub.go

feat(hosts): add a cipher suites override and accept custom suites

2026-09-16 11:56:20 +02:00

hwid_controller_test.go

feat(sub): add read-only HWID device-slot status endpoint (#6380 )

2026-09-11 11:59:35 +02:00

hysteria_geco_uri_test.go

fix(hysteria): standard geco share links and persistent uTLS None (#6325 )

2026-09-03 16:35:07 +02:00

inactive_external_sub_test.go

Feature/fix external subscription client expiry (#6333 )

2026-09-03 22:32:05 +02:00

info_endpoint_test.go

feat(sub): redesign the subscription page around usage, tabs and app imports

2026-09-16 01:55:56 +02:00

json_dns_controller_test.go

feat(sub): let the panel set the JSON subscription DNS servers (#6485 )

2026-09-13 11:51:56 +02:00

json_dns_test.go

feat(sub): let the panel set the JSON subscription DNS servers (#6485 )

2026-09-13 11:51:56 +02:00

json_dns.go

feat(sub): let the panel set the JSON subscription DNS servers (#6485 )

2026-09-13 11:51:56 +02:00

json_flow_gate_test.go

feat(sub): bake Happ/INCY routing profiles into the JSON subscription (#6402 )

2026-09-10 17:05:54 +02:00

json_info_node_test.go

feat(sub): bake Happ/INCY routing profiles into the JSON subscription (#6402 )

2026-09-10 17:05:54 +02:00

json_routing_baked_test.go

feat(sub): bake Happ/INCY routing profiles into the JSON subscription (#6402 )

2026-09-10 17:05:54 +02:00

json_routing_test.go

feat(sub): bake Happ/INCY routing profiles into the JSON subscription (#6402 )

2026-09-10 17:05:54 +02:00

json_routing.go

feat(sub): bake Happ/INCY routing profiles into the JSON subscription (#6402 )

2026-09-10 17:05:54 +02:00

json_service_test.go

Feature/tuic v5 (#6337 )

2026-09-12 10:15:48 +02:00

json_service.go

feat(sub): add opt-in month-end expiry presentation (#6517 )

2026-09-14 12:10:25 +02:00

links_test.go

fix(inbounds): serve fresh client UUIDs for list and allLinks (#6458 )

2026-09-12 11:12:13 +02:00

links.go

fix(mtproto): use hosts for public share links (#6369 )

2026-09-08 15:36:57 +02:00

mutation_audit_test.go

feat(sub): bake Happ/INCY routing profiles into the JSON subscription (#6402 )

2026-09-10 17:05:54 +02:00

page_data_test.go

feat(sub): expose live online status and add ?format=info endpoint

2026-07-23 23:57:29 +02:00

placeholders_test.go

fix(sub): prevent default profile page URL disclosure (#6538 )

2026-09-15 21:13:29 +02:00

placeholders.go

fix(sub): prevent default profile page URL disclosure (#6538 )

2026-09-15 21:13:29 +02:00

profile_mode_test.go

fix(sub): prevent default profile page URL disclosure (#6538 )

2026-09-15 21:13:29 +02:00

remark_vars_test.go

fix(sub): use a fullwidth percent in USAGE_PERCENTAGE (#6174 )

2026-08-14 20:13:15 +02:00

remark_vars.go

feat(sub): add dummy info node and status configs for subscriptions (#6412 )

2026-09-08 17:14:01 +02:00

remote_routing_test.go

fix(hysteria): standard geco share links and persistent uTLS None (#6325 )

2026-09-03 16:35:07 +02:00

remote_routing.go

feat(sub): bake Happ/INCY routing profiles into the JSON subscription (#6402 )

2026-09-10 17:05:54 +02:00

salamander_uri_test.go

fix(hysteria): standard geco share links and persistent uTLS None (#6325 )

2026-09-03 16:35:07 +02:00

service_amneziawg_test.go

fix(sub): preserve per-inbound tunnel identity in subscriptions (#6653 )

2026-09-26 20:31:47 +02:00

service_dedup_test.go

fix(sub): resolve subscription clients and stats from normalized tables

2026-07-02 16:58:00 +02:00

service_flow_test.go

feat(inbound): DisableFlow — opt an inbound out of auto XTLS Vision (#5689 ) (#5698 )

2026-08-15 23:09:16 +02:00

service_info_node_test.go

feat(sub): add dummy info node and status configs for subscriptions (#6412 )

2026-09-08 17:14:01 +02:00

service_mtproto_test.go

fix(mtproto): use hosts for public share links (#6369 )

2026-09-08 15:36:57 +02:00

service_orphaned_stats_test.go

…

service_property_test.go

…

service_sharelink_test.go

…

service_sort_test.go

…

service_test.go

feat(xray): update xray-core to v26.9.9 and follow the udpHop move

2026-09-09 01:53:00 +02:00

service_tuic_test.go

Feature/tuic v5 (#6337 )

2026-09-12 10:15:48 +02:00

service_userinfo_test.go

…

service_wireguard_test.go

fix(sub): preserve per-inbound tunnel identity in subscriptions (#6653 )

2026-09-26 20:31:47 +02:00

service.go

fix(sub): never use X-Real-IP as the subscription host (#6608 )

2026-09-26 21:13:46 +02:00

shadowsocks_plugin_import_test.go

fix(link): rebuild shadowsocks tcp/http obfuscation on import (#6505 )

2026-09-13 19:58:27 +02:00

sub_balancer_protocol_tag_test.go

feat(sub): bake Happ/INCY routing profiles into the JSON subscription (#6402 )

2026-09-10 17:05:54 +02:00

sub_balancer_test.go

feat(sub): bake Happ/INCY routing profiles into the JSON subscription (#6402 )

2026-09-10 17:05:54 +02:00

sub_fetch_test.go

feat(sub): expose last subscription fetch time (#6217 )

2026-08-15 15:22:11 +02:00

sub_json_observatory_test.go

feat(sub): bake Happ/INCY routing profiles into the JSON subscription (#6402 )

2026-09-10 17:05:54 +02:00

sub_panic_test.go

feat(sub): bake Happ/INCY routing profiles into the JSON subscription (#6402 )

2026-09-10 17:05:54 +02:00

sub_scale_test.go

feat(sub): bake Happ/INCY routing profiles into the JSON subscription (#6402 )

2026-09-10 17:05:54 +02:00

sub.go

fix(sub): prevent default profile page URL disclosure (#6538 )

2026-09-15 21:13:29 +02:00

vless_route_sub_test.go

feat(sub): bake Happ/INCY routing profiles into the JSON subscription (#6402 )

2026-09-10 17:05:54 +02:00

vless_route_test.go

…

vless_route.go

…

vmess_tls_import_test.go

fix(link): read the vmess certificate checks on import (#6507 )

2026-09-13 19:58:10 +02:00