MHSanaei 68a981c0c3 fix(server): guard access-log parser against malformed lines ...

GetXrayLogs split each Xray access-log line on whitespace and then read
fixed offsets — parts[1] for the timestamp and parts[i+1] after the "from",
"accepted" and "email:" markers — without checking the line had that many
fields. A truncated or malformed line (the logged destination is
attacker-influenced) indexed past the slice and panicked; the panel handler
returned a 500 via Gin's recovery.

Extract the per-line field parsing into parseAccessLogFields and length
guard every positional lookup so a short line yields a partial entry
instead of panicking.

2026-07-15 04:44:53 +02:00

..

config

v3.5.0

2026-07-12 22:08:19 +02:00

database

fix(db): mark the IP-limit cleanup seeder done on a fresh install

2026-07-15 03:52:15 +02:00

eventbus

fix(eventbus): dispatch each subscriber in its own goroutine

2026-07-15 04:34:06 +02:00

logger

fix(inbounds): apply runtime changes after the DB commit (#5768)

2026-07-08 22:12:28 +02:00

mtproto

refactor: modernize Go with strings.SplitSeq and maps.Copy

2026-07-08 22:10:54 +02:00

sub

fix(sub): drop empty remark segments instead of leaving a stray separator

2026-07-15 02:56:42 +02:00

tunnelmonitor

style: adopt golangci-lint v2 and resolve all findings

2026-06-27 15:42:22 +02:00

util

fix(link): honor the vmess ws path and hysteria2 vcn params on import

2026-07-15 02:52:09 +02:00

web

fix(server): guard access-log parser against malformed lines

2026-07-15 04:44:53 +02:00

xray

fix(xray): synchronize the process version and apiPort fields

2026-07-15 03:33:38 +02:00