3x-ui

mirror of https://github.com/MHSanaei/3x-ui.git synced 2026-06-28 00:24:19 +00:00

Files

T

n0ctal 71616b7cf2 feat(web): cap request body size on state-changing routes (#5271 )

* feat(web): cap request body size on state-changing routes

* fix(web): exempt importDB from request body size cap

The 10 MiB body cap was applied globally, which would break database
restore (/panel/api/server/importDB) on any panel whose SQLite backup
exceeds the limit. Make MaxBodyBytes accept exempt path suffixes and
pass importDB through uncapped; the cap still covers all other
state-changing routes. Add a test for the skip-suffix behavior.

---------

Co-authored-by: Sanaei <ho3ein.sanaei@gmail.com>

2026-06-15 16:04:16 +02:00

bodylimit_test.go

feat(web): cap request body size on state-changing routes (#5271 )

2026-06-15 16:04:16 +02:00

bodylimit.go

feat(web): cap request body size on state-changing routes (#5271 )

2026-06-15 16:04:16 +02:00

domainValidator.go

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167 )

2026-06-10 15:19:22 +02:00

security_test.go

Test-quality audit: fix 2 prod bugs, strengthen weak tests, add mutation/fuzz/CI tooling (#5345 )