xinyin025/3x-ui
1
0
Fork 0
mirror of https://github.com/MHSanaei/3x-ui.git synced 2026-07-09 06:06:08 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
788c979ad18e5375fb6b6ca0b6fb3808c9ce2920
3x-ui/web
T
History
MHSanaei 788c979ad1 fix(client): guard against int overflow in ClientWithAttachments marshal 
CodeQL flagged go/allocation-size-overflow on len(rec)+len(extra) feeding
make's capacity. Not exploitable in practice (both come from json.Marshal
of bounded structs), but add an explicit MaxInt guard to silence the
analyzer and make the precondition obvious.
2026-05-19 12:40:18 +02:00
..
controller
Feat/multi inbound clients (#4469)
2026-05-19 12:20:24 +02:00
entity
Feat/multi inbound clients (#4469)
2026-05-19 12:20:24 +02:00
global
Feat/multi inbound clients (#4469)
2026-05-19 12:20:24 +02:00
job
Feat/multi inbound clients (#4469)
2026-05-19 12:20:24 +02:00
locale
v3
2026-05-10 02:13:42 +02:00
middleware
Security hardening: sessions, SSRF, CSP nonce, CSRF logout, trusted proxies (#4275)
2026-05-13 12:52:52 +02:00
network
docs: add comments for all functions
2025-09-20 09:35:50 +02:00
runtime
Feat/multi inbound clients (#4469)
2026-05-19 12:20:24 +02:00
service
fix(client): guard against int overflow in ClientWithAttachments marshal
2026-05-19 12:40:18 +02:00
session
Security hardening: sessions, SSRF, CSP nonce, CSRF logout, trusted proxies (#4275)
2026-05-13 12:52:52 +02:00
translation
Feat/multi inbound clients (#4469)
2026-05-19 12:20:24 +02:00
websocket
fix(websocket): order register/unregister via single ops channel
2026-05-19 12:34:53 +02:00
web.go
Security hardening: sessions, SSRF, CSP nonce, CSRF logout, trusted proxies (#4275)
2026-05-13 12:52:52 +02:00