MHSanaei dcaadd4857 fix(panel): validate sponsor logo name before any file or network use ...

The public /sponsors/logo/:name route only accepted names matching an
active sponsor's logo, which was already regex-filtered, but that guard
was indirect. Checking sponsorLogoRe on the name itself makes the
path/URL safety local and clears CodeQL alerts #113 (go/request-forgery)
and #114 (go/path-injection).

2026-09-26 12:40:31 +02:00

..

discord

fix(discord): page the inbounds reply within Discord's embed caps (#6496)

2026-09-13 19:47:49 +02:00

email

fix(settings): show the SMTP failure reason instead of a raw i18n key

2026-09-09 00:51:44 +02:00

integration

feat(nord): support multi-server NordLynx outbounds (#6311)

2026-09-02 20:20:10 +02:00

outbound

fix(xray): read the last two inboundTag protocol ids like the core (#6530)

2026-09-14 21:18:31 +03:00

panel

fix(panel): validate sponsor logo name before any file or network use

2026-09-26 12:40:31 +02:00

tgbot

fix(tgbot): localize QR caption via I18nBot (#6564)

2026-09-16 12:23:42 +02:00

access_log_parse_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

api_scale_postgres_test.go

feat(sub): add per-client subscription HWID limits (#5802)

2026-08-15 16:50:20 +02:00

backup_filename_test.go

…

bulk_clients_test.go

…

bulk_traffic_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

calendar_renew_test.go

feat(clients): renew on a calendar day instead of a rolling interval (#6239)

2026-08-18 12:46:00 +02:00

calendar_renew.go

feat(clients): renew on a calendar day instead of a rolling interval (#6239)

2026-08-18 12:46:00 +02:00

client_add_dedupe_test.go

fix(client): stop duplicate client entries accumulating in inbound settings

2026-07-05 21:17:25 +02:00

client_amneziawg_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_amneziawg.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_apply_field_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

client_attach_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_bulk_fanout_test.go

feat(clients): support setting HWID limit and MTProto ad-tag in bulk adjust (#6399)

2026-09-10 16:24:48 +02:00

client_bulk_flow_test.go

feat(clients): support setting HWID limit and MTProto ad-tag in bulk adjust (#6399)

2026-09-10 16:24:48 +02:00

client_bulk_reenable_test.go

feat(clients): support setting HWID limit and MTProto ad-tag in bulk adjust (#6399)

2026-09-10 16:24:48 +02:00

client_bulk_reset_query_count_test.go

perf(clients): batch the client record lookup in bulk operations

2026-09-10 21:07:49 +02:00

client_bulk_reset_reenable_test.go

fix(clients): surface bulk-reset auto-enable failures (#5763)

2026-07-08 20:53:42 +02:00

client_bulk.go

fix(clients): keep a vless reverse client's handler across a re-add (#6558)

2026-09-15 18:00:54 +03:00

client_create_fanout_test.go

perf(clients): apply a multi-inbound client create concurrently

2026-09-04 01:01:20 +02:00

client_create_reuse_test.go

fix(clients): reuse stored credentials when re-adding an existing identity

2026-07-11 22:48:51 +02:00

client_cross_inbound_race_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_crud.go

fix(clients): preserve enable on portable import (#6481)

2026-09-12 11:13:42 +02:00

client_delete_continue_test.go

fix(clients): finish deleting from every inbound when one fails

2026-07-11 22:48:57 +02:00

client_delete_node_baseline_test.go

fix(client): clean node_client_traffics rows when deleting a client

2026-07-07 15:05:22 +02:00

client_delete_node_full_test.go

fix(node): fully delete clients on nodes instead of only detaching them

2026-07-05 20:28:26 +02:00

client_delete_tombstone_test.go

fix(clients): withdraw the delete tombstone when the email is re-created

2026-09-09 00:17:54 +02:00

client_disable_restart_test.go

fix(xray): restart when a diff strands a client's live session (#6550)

2026-09-15 15:39:40 +03:00

client_edit_node_dirty_test.go

fix(node): flag every hosting node before a client edit applies

2026-09-07 01:51:18 +02:00

client_effective_flow_test.go

…

client_email_validation_test.go

…

client_external_link_test.go

chore(build): bump Go toolchain to 1.27.0

2026-08-23 21:57:03 +02:00

client_external_link.go

Add per-client external link controls (#5650)

2026-08-18 13:55:04 +02:00

client_flow_isolation_test.go

fix(clients): use EffectiveFlow in BulkAttach (#6454)

2026-09-12 11:13:19 +02:00

client_group_bulk_test.go

fix(groups): report changed bulk moves without restarting xray (#6199)

2026-08-14 19:50:06 +02:00

client_group_node_sync_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

client_group_reset_test.go

…

client_groups.go

fix(groups): report changed bulk moves without restarting xray (#6199)

2026-08-14 19:50:06 +02:00

client_hwid_test.go

fix(clients): list HWID devices when the HWID limit is 0

2026-09-16 11:50:49 +02:00

client_hwid.go

fix(clients): list HWID devices when the HWID limit is 0

2026-09-16 11:50:49 +02:00

client_identity_normalized_test.go

perf(clients): write client_inbounds deltas and check identity from the clients table

2026-08-20 04:09:57 +02:00

client_inbound_apply_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_inbound_apply.go

fix(clients): keep a vless reverse client's handler across a re-add (#6558)

2026-09-15 18:00:54 +03:00

client_ips_prune_test.go

fix(job): expire stored client IPs of offline clients

2026-08-24 13:27:40 +02:00

client_link_delta_test.go

perf(clients): write client_inbounds deltas and check identity from the clients table

2026-08-20 04:09:57 +02:00

client_link.go

fix(clients): preserve enable on portable import (#6481)

2026-09-12 11:13:42 +02:00

client_locks_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

client_locks.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

client_lookup_test.go

feat(api): add GET endpoint to look up clients by Telegram ID (#5945)

2026-07-28 22:38:44 +02:00

client_lookup.go

perf(clients): batch the client record lookup in bulk operations

2026-09-10 21:07:49 +02:00

client_node_push_test.go

perf(node): bound the per-client node push and fan out the traffic reset

2026-09-07 14:24:14 +02:00

client_paging_test.go

feat(clients): filter the client list by clicking a summary stat card

2026-09-15 22:06:22 +02:00

client_paging.go

feat(clients): filter the client list by clicking a summary stat card

2026-09-15 22:06:22 +02:00

client_portable_test.go

fix(clients): preserve enable on portable import (#6481)

2026-09-12 11:13:42 +02:00

client_portable.go

fix(clients): preserve enable on portable import (#6481)

2026-09-12 11:13:42 +02:00

client_reverse_readd_test.go

fix(clients): keep a vless reverse client's handler across a re-add (#6558)

2026-09-15 18:00:54 +03:00

client_stat_reuse_test.go

feat(sub): add per-client subscription HWID limits (#5802)

2026-08-15 16:50:20 +02:00

client_sync_mtproto_test.go

feat(mtproto): per-client ad-tags, management-API auth, and record secret sync

2026-07-07 12:00:43 +02:00

client_sync_multiprotocol_test.go

…

client_sync_orphan_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

client_sync_orphan.go

fix(node): stop the node sync from deleting clients it never meant to

2026-08-01 15:19:08 +02:00

client_test.go

chore(build): bump Go toolchain to 1.27.0

2026-08-23 21:57:03 +02:00

client_traffic_cycle_test.go

feat(clients): give each client its own traffic reset cycle (#6240)

2026-08-18 13:08:44 +02:00

client_traffic.go

perf(clients): batch the client record lookup in bulk operations

2026-09-10 21:07:49 +02:00

client_update_allowedips_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_update_enable_test.go

feat(sub): add per-client subscription HWID limits (#5802)

2026-08-15 16:50:20 +02:00

client_update_fanout_test.go

perf(node): bound the per-client node push and fan out the traffic reset

2026-09-07 14:24:14 +02:00

client_update_keepalive_test.go

feat(clients): let admins set PersistentKeepalive on tunnel clients (#6377)

2026-09-10 22:32:42 +02:00

client_update_no_inbound_test.go

feat(sub): add per-client subscription HWID limits (#5802)

2026-08-15 16:50:20 +02:00

client_update_rename_test.go

feat(sub): add per-client subscription HWID limits (#5802)

2026-08-15 16:50:20 +02:00

client_update_tunnel_peers_test.go

fix(clients): keep per-peer keys when a client spans several tunnel inbounds

2026-09-09 00:30:02 +02:00

client_wireguard_crud_test.go

fix(node): fully delete clients on nodes instead of only detaching them

2026-07-05 20:28:26 +02:00

client_wireguard_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_wireguard.go

feat(clients): let admins set PersistentKeepalive on tunnel clients (#6377)

2026-09-10 22:32:42 +02:00

client.go

fix(clients): preserve enable on portable import (#6481)

2026-09-12 11:13:42 +02:00

config.json

fix(xray): place the freedom domain strategy where the core reads it (#6515)

2026-09-14 12:08:38 +02:00

default_template_freedom_test.go

fix(xray): place the freedom domain strategy where the core reads it (#6515)

2026-09-14 12:08:38 +02:00

del_shared_email_runtime_test.go

fix(node): fully delete clients on nodes instead of only detaching them

2026-07-05 20:28:26 +02:00

depleted_calendar_test.go

fix: follow-ups from the post-merge reviews of #6221, #6227, #6230 and #6239 (#6250)

2026-08-18 15:24:59 +02:00

fallback.go

…

finalmask_rand_packet_test.go

fix(xray): reject configs xray-core refuses, and check the fixtures against it

2026-07-28 14:43:55 +02:00

geodata.go

feat(xray): browse geosite/geoip categories from routing rules (#6165)

2026-08-15 17:12:59 +02:00

global_traffic_test.go

fix(traffic): apply maintenance side effects only after the commit lands (#6200)

2026-08-14 19:42:09 +02:00

golden_fixtures_xray_test.go

chore: refresh dependencies and modernize Go test idioms

2026-07-30 03:14:22 +02:00

happ_crypto.go

feat(happ): generate Crypt5 subscription links locally (#6494)

2026-09-13 12:44:55 +02:00

happ_local_test.go

feat(happ): generate Crypt5 subscription links locally (#6494)

2026-09-13 12:44:55 +02:00

happ_test.go

feat(happ): generate Crypt5 subscription links locally (#6494)

2026-09-13 12:44:55 +02:00

happ.go

feat(happ): generate Crypt5 subscription links locally (#6494)

2026-09-13 12:44:55 +02:00

host_test.go

feat(hosts): add a cipher suites override and accept custom suites

2026-09-16 11:56:20 +02:00

host.go

feat(hosts): add a cipher suites override and accept custom suites

2026-09-16 11:56:20 +02:00

import_host_settings_test.go

fix: follow-ups from the post-merge reviews of #6221, #6227, #6230 and #6239 (#6250)

2026-08-18 15:24:59 +02:00

inbound_amneziawg_relay_window_test.go

fix(amneziawg): refuse a row's own relay port and keep a disabled row's slot reserved (#6544)

2026-09-15 13:31:07 +03:00

inbound_amneziawg_test.go

fix(amneziawg): stop losing an inbound and its server keys on the API path

2026-09-09 00:42:52 +02:00

inbound_amneziawg.go

fix(amneziawg): refuse a row's own relay port and keep a disabled row's slot reserved (#6544)

2026-09-15 13:31:07 +03:00

inbound_autorenew_calendar_test.go

fix(clients): snap EOM 23:59:59 expiry to billing midnight without renew (#6457)

2026-09-12 11:06:47 +02:00

inbound_autorenew_globaltraffic_test.go

fix(traffic): clear cross-panel rows only for clients actually renewed (#6263)

2026-08-22 23:12:33 +02:00

inbound_autorenew_maxcount_test.go

feat(clients): cap how many times a client may auto-renew (#6238)

2026-08-18 11:53:11 +02:00

inbound_autorenew_shadowsocks_test.go

fix(traffic): apply maintenance side effects only after the commit lands (#6200)

2026-08-14 19:42:09 +02:00

inbound_autorenew_shared_email_test.go

fix(clients): sync auto-renewal across inbounds (#6339)

2026-09-02 20:39:03 +02:00

inbound_autorenew_test.go

fix(traffic): apply maintenance side effects only after the commit lands (#6200)

2026-08-14 19:42:09 +02:00

inbound_client_ips_merge_test.go

…

inbound_client_ips.go

fix(node): push a node only the client IPs it hosts

2026-09-15 16:28:31 +02:00

inbound_client_move_test.go

Bug-label issue sweep: 16 fixes (#6083)

2026-07-23 15:34:42 +02:00

inbound_client_traffic_test.go

…

inbound_clients_stale_uuid_test.go

fix(inbounds): serve fresh client UUIDs for list and allLinks (#6458)

2026-09-12 11:12:13 +02:00

inbound_clients_tuic_test.go

Feature/tuic v5 (#6337)

2026-09-12 10:15:48 +02:00

inbound_clients.go

fix(inbounds): serve fresh client UUIDs for list and allLinks (#6458)

2026-09-12 11:12:13 +02:00

inbound_create_race_test.go

fix(inbounds): close the port check-and-claim race on the serial writer (#6225)

2026-08-18 11:48:40 +02:00

inbound_disable_flow_test.go

feat(inbound): DisableFlow — opt an inbound out of auto XTLS Vision (#5689) (#5698)

2026-08-15 23:09:16 +02:00

inbound_disable.go

fix(traffic): apply maintenance side effects only after the commit lands (#6200)

2026-08-14 19:42:09 +02:00

inbound_durable_postgres_test.go

fix(inbounds): reject missing TLS certificates before saving (#6429)

2026-09-08 18:08:24 +02:00

inbound_enable_port_test.go

fix(inbounds): check ports when an inbound is enabled, not only when it is saved (#6549)

2026-09-15 15:29:32 +03:00

inbound_fallback_runtime_test.go

fix(node): stop the node sync from deleting clients it never meant to

2026-08-01 15:19:08 +02:00

inbound_finalmask_reality_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

inbound_finalmask_xmc_test.go

feat(xray): update xray-core to v26.7.28 and adapt panel

2026-07-28 13:14:06 +02:00

inbound_flow_restore_test.go

…

inbound_flow_restore.go

feat(inbound): DisableFlow — opt an inbound out of auto XTLS Vision (#5689) (#5698)

2026-08-15 23:09:16 +02:00

inbound_hysteria_auth_test.go

fix: reject Hysteria inbound updates with empty client auth (#6268)

2026-08-22 23:11:42 +02:00

inbound_import_external_proxy_test.go

fix(mtproto): use hosts for public share links (#6369)

2026-09-08 15:36:57 +02:00

inbound_import_shared_clients_test.go

fix: refresh stale client_traffics row when an inbound-deleted client's email is reused (#6003)

2026-07-21 15:57:55 +02:00

inbound_migration_test.go

fix(migration): stop a half-applied startup migration from committing silently (#6182)

2026-08-14 20:10:39 +02:00

inbound_migration.go

feat(inbound): DisableFlow — opt an inbound out of auto XTLS Vision (#5689) (#5698)

2026-08-15 23:09:16 +02:00

inbound_mtproto_apply_test.go

fix(mtproto): stop dropping connections on client/inbound edits; add live updates + ad-tag (#5838)

2026-07-07 01:13:24 +02:00

inbound_mtproto_client_test.go

fix(mtproto): stop dropping connections on client/inbound edits; add live updates + ad-tag (#5838)

2026-07-07 01:13:24 +02:00

inbound_mtproto_desired_test.go

fix(node): stop the node sync from deleting clients it never meant to

2026-08-01 15:19:08 +02:00

inbound_mtproto_test.go

fix(mtproto): stop persisting a vestigial inbound-level secret

2026-07-06 17:55:57 +02:00

inbound_mtproto_txfail_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

inbound_mtproto.go

fix(node): stop the node sync from deleting clients it never meant to

2026-08-01 15:19:08 +02:00

inbound_node_ips_test.go

…

inbound_node_ips.go

fix(job): expire stored client IPs of offline clients

2026-08-24 13:27:40 +02:00

inbound_node_protocol_update_test.go

fix(inbounds): let a node-adopted inbound keep its own protocol on edit

2026-09-09 00:24:01 +02:00

inbound_node_reconcile_test.go

fix(node): import a newly selected node inbound instead of sweeping it

2026-09-13 22:44:50 +02:00

inbound_node_sweep_log_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

inbound_node.go

fix(node): fan out operations that call every node

2026-09-15 20:07:18 +02:00

inbound_options_node_address_test.go

…

inbound_protocol_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

inbound_protocol.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

inbound_settings_clients_test.go

fix(clients): parse only settings.clients across protocols (#5855)

2026-07-08 20:31:00 +02:00

inbound_settings_clients.go

perf(clients): write client_inbounds deltas and check identity from the clients table

2026-08-20 04:09:57 +02:00

inbound_sub_sort_test.go

fix(inbounds): allow negative subSortIndex for subscription order (#6465)

2026-09-12 11:14:53 +02:00

inbound_sublink.go

…

inbound_subsort_test.go

fix(inbounds): allow negative subSortIndex for subscription order (#6465)

2026-09-12 11:14:53 +02:00

inbound_tgbot_lookup_test.go

…

inbound_tls_test.go

fix(inbounds): reject missing TLS certificates before saving (#6429)

2026-09-08 18:08:24 +02:00

inbound_traffic_apply.go

fix(traffic): push depletion changes to nodes off the serial writer

2026-09-15 19:04:55 +02:00

inbound_traffic_global.go

fix(node): push a node only the client IPs it hosts

2026-09-15 16:28:31 +02:00

inbound_traffic_reset_test.go

inbounds: allow custom monthly traffic reset days (#6071)

2026-07-28 23:27:09 +02:00

inbound_traffic.go

fix(node): fan out operations that call every node

2026-09-15 20:07:18 +02:00

inbound_tuic.go

Feature/tuic v5 (#6337)

2026-09-12 10:15:48 +02:00

inbound_update_tag_test.go

fix(mtproto): use hosts for public share links (#6369)

2026-09-08 15:36:57 +02:00

inbound_util_test.go

fix(inbounds): allow negative subSortIndex for subscription order (#6465)

2026-09-12 11:14:53 +02:00

inbound_util.go

fix(inbounds): allow negative subSortIndex for subscription order (#6465)

2026-09-12 11:14:53 +02:00

inbound.go

fix(node): fan out operations that call every node

2026-09-15 20:07:18 +02:00

key_gen_parse_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

metric_history_test.go

…

metric_history.go

chore: refresh dependencies, fix Linux tool tasks, modernize Go idioms

2026-07-25 16:08:09 +02:00

mtproto_fake_test.go

fix(mtproto): stop dropping connections on client/inbound edits; add live updates + ad-tag (#5838)

2026-07-07 01:13:24 +02:00

node_admin_fanout_test.go

fix(node): fan out operations that call every node

2026-09-15 20:07:18 +02:00

node_bulk_dispatch_test.go

feat(clients): support setting HWID limit and MTProto ad-tag in bulk adjust (#6399)

2026-09-10 16:24:48 +02:00

node_client_breakdown_test.go

fix(inbounds): apply runtime changes after the DB commit (#5768)

2026-07-08 22:12:28 +02:00

node_client_expiry_sync_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

node_client_renew_sync_test.go

fix(node): start a fresh quota window when a node auto-renews a client

2026-07-07 15:05:23 +02:00

node_client_traffic_sum_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

node_contract.go

fix(nodes): make node API tokens write-only (#5613)

2026-07-23 15:35:11 +02:00

node_credentials_writeonly_test.go

fix(nodes): make node API tokens write-only (#5613)

2026-07-23 15:35:11 +02:00

node_delete_cleanup_test.go

fix(node): release a deleted node's metric series and HTTP client

2026-09-15 20:39:32 +02:00

node_delete_orphan_test.go

…

node_dirty_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

node_foreign_client_test.go

fix(node): refuse a node's claim on another inbound's client

2026-09-03 18:06:35 +02:00

node_host_adopt_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

node_http_fake_test.go

perf(node): bound the per-client node push and fan out the traffic reset

2026-09-07 14:24:14 +02:00

node_mtls_test.go

fix(nodes): apply a rotated master mTLS certificate without restarting the panel (#6194)

2026-08-15 16:03:42 +02:00

node_mtls.go

fix(nodes): validate every certificate in the node mTLS trust bundle (#6188)

2026-08-15 21:31:31 +02:00

node_netmetrics_test.go

…

node_origin_guid_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

node_probe_body_cap_test.go

Update deps and simplify parsing

2026-09-08 14:12:13 +02:00

node_probe_unsampled_test.go

fix(nodes): stop a restarting panel from reporting itself as down

2026-09-18 13:25:24 +03:00

node_push_payload_test.go

fix(node): stop the node sync from deleting clients it never meant to

2026-08-01 15:19:08 +02:00

node_shared_guid_test.go

…

node_sweep_guard_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

node_sync_link_churn_test.go

perf(clients): write client_inbounds deltas and check identity from the clients table

2026-08-20 04:09:57 +02:00

node_tag_sync_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

node_test.go

fix(node): adopt a matching deployed inbound instead of recreating it (#6197)

2026-08-14 20:01:35 +02:00

node_token_encryption_test.go

feat(nodes): opt-in encryption at rest for the outbound node API token (#6186)

2026-08-15 16:48:50 +02:00

node_tree_test.go

fix(inbounds): apply runtime changes after the DB commit (#5768)

2026-07-08 22:12:28 +02:00

node_tree.go

fix(node): drop online clients and sub-nodes of nodes no longer synced

2026-09-15 19:27:38 +02:00

node_unsynced_online_test.go

fix(node): drop online clients and sub-nodes of nodes no longer synced

2026-09-15 19:27:38 +02:00

node.go

fix(nodes): stop a restarting panel from reporting itself as down

2026-09-18 13:25:24 +03:00

outbound_subscription_ssrf_test.go

Bug-label issue sweep: 16 fixes (#6083)

2026-07-23 15:34:42 +02:00

outbound_subscription_test.go

fix(outbounds): keep subscription tags on their server when reality params rotate

2026-09-15 22:39:59 +02:00

outbound_subscription.go

fix(outbounds): keep subscription tags on their server when reality params rotate

2026-09-15 22:39:59 +02:00

port_conflict_forwarded_test.go

fix(ports): refuse an inbound on a port an AmneziaWG peer forwards (#6554)

2026-09-15 16:58:21 +03:00

port_conflict_test.go

fix(amneziawg): reserve the relay port before an AmneziaWG inbound has a peer (#6542)

2026-09-15 11:49:18 +03:00

port_conflict.go

fix(ports): refuse an inbound on a port an AmneziaWG peer forwards (#6554)

2026-09-15 16:58:21 +03:00

reality_scan_test.go

feat(settings): add setting for Reality scan candidates (#6471)

2026-09-13 14:48:28 +02:00

reality_scan.go

feat(settings): add setting for Reality scan candidates (#6471)

2026-09-13 14:48:28 +02:00

reset_writer_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

scale_helpers_test.go

refactor: modernize Go with strings.SplitSeq and maps.Copy

2026-07-08 22:10:54 +02:00

server_cold_status_test.go

fix(nodes): stop a restarting panel from reporting itself as down

2026-09-18 13:25:24 +03:00

server_geofile_test.go

feat(geodata): add standard source presets (#6504)

2026-09-13 20:02:43 +02:00

server_import_sniff_test.go

feat(server): sniff sqlite panel restore uploads and keep the fallback on failure

2026-07-12 20:14:22 +02:00

server_import_stage_test.go

feat(server): sniff sqlite panel restore uploads and keep the fallback on failure

2026-07-12 20:14:22 +02:00

server_pg_restore_test.go

feat(db): add pgclient command to install or upgrade PostgreSQL client tools

2026-07-06 09:24:18 +02:00

server_public_ip_async_test.go

fix(nodes): stop a restarting panel from reporting itself as down

2026-09-18 13:25:24 +03:00

server_vlessenc_test.go

…

server_xray_checksum_test.go

…

server.go

fix(nodes): stop a restarting panel from reporting itself as down

2026-09-18 13:25:24 +03:00

setting_clash_test.go

feat(sub): auto-detect subscription format by User-Agent (Updated) (#5826)

2026-07-14 13:01:40 +02:00

setting_factory_defaults_test.go

feat(discord): add Discord notification bot service (#6486)

2026-09-13 14:04:53 +02:00

setting_happ_test.go

feat(happ): generate Crypt5 subscription links locally (#6494)

2026-09-13 12:44:55 +02:00

setting_mtls_bundle_test.go

fix(nodes): say which half of node mTLS failed, and say it as an error (#6565)

2026-09-16 12:30:44 +02:00

setting_mtls_test.go

chore(build): bump Go toolchain to 1.27.0

2026-08-23 21:57:03 +02:00

setting_mtls.go

fix(nodes): say which half of node mTLS failed, and say it as an error (#6565)

2026-09-16 12:30:44 +02:00

setting_remote_routing_test.go

feat(sub): bake Happ/INCY routing profiles into the JSON subscription (#6402)

2026-09-10 17:05:54 +02:00

setting_security_test.go

fix(panel): accept 2FA codes from adjacent TOTP windows (#6546)

2026-09-15 15:42:30 +03:00

setting_sub_identity_test.go

feat(sub): allow identity tokens on every subscription link (#5935)

2026-07-28 22:12:52 +02:00

setting_sub_info_node_test.go

feat(sub): add dummy info node and status configs for subscriptions (#6412)

2026-09-08 17:14:01 +02:00

setting_sub_json_dns_test.go

feat(sub): let the panel set the JSON subscription DNS servers (#6485)

2026-09-13 11:51:56 +02:00

setting_sub_profile_test.go

fix(sub): prevent default profile page URL disclosure (#6538)

2026-09-15 21:13:29 +02:00

setting.go

fix(sub): prevent default profile page URL disclosure (#6538)

2026-09-15 21:13:29 +02:00

shadowsocks_client_key_test.go

…

stream_network_alias_test.go

feat(xray): update xray-core to v26.7.11 and adapt panel

2026-07-12 00:30:47 +02:00

sub_balancer_inbound_cleanup_test.go

feat(sub): client-side balancers for the JSON subscription (#6243)

2026-08-23 22:34:20 +02:00

sub_balancer_test.go

feat(sub): leastLoad member weights for subscription balancers (#6304)

2026-09-02 20:21:27 +02:00

sub_balancer.go

feat(sub): leastLoad member weights for subscription balancers (#6304)

2026-09-02 20:21:27 +02:00

sub_uri_base_test.go

…

sync_scale_postgres_test.go

feat(clients): support setting HWID limit and MTProto ad-tag in bulk adjust (#6399)

2026-09-10 16:24:48 +02:00

traffic_commit_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

traffic_depletion_node_push_test.go

fix(traffic): push depletion changes to nodes off the serial writer

2026-09-15 19:04:55 +02:00

traffic_poll_scale_test.go

…

traffic_runtime_apply_test.go

fix(traffic): push depletion changes to nodes off the serial writer

2026-09-15 19:04:55 +02:00

traffic_writer_test.go

…

traffic_writer.go

…

url_safety_test.go

fix(panel): stop one poisoned DNS answer from blocking outbound tests

2026-08-24 13:27:40 +02:00

url_safety.go

fix(panel): stop one poisoned DNS answer from blocking outbound tests

2026-08-24 13:27:40 +02:00

ws_payload_scale_test.go

…

xray_amneziawg_outbound_test.go

fix(amneziawg): read the outbound pseudo-protocol id like the core (#6531)

2026-09-15 08:23:18 +03:00

xray_amneziawg_outbound.go

feat(amneziawg): add AmneziaWG as an outbound protocol (#6320)

2026-09-10 14:50:48 +02:00

xray_bind_conflict_test.go

fix(xray): refuse a config the running core cannot bind (#6547)

2026-09-15 15:27:28 +03:00

xray_bind_conflict.go

fix(xray): refuse a config the running core cannot bind (#6547)

2026-09-15 15:27:28 +03:00

xray_config_clients_test.go

style: drop the line comments added with the triage fixes

2026-07-27 14:37:57 +02:00

xray_config_inject_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

xray_config_scale_test.go

…

xray_drop_clients_test.go

fix(xray): restart when a diff strands a client's live session (#6550)

2026-09-15 15:39:40 +03:00

xray_lifecycle_test.go

fix(xray): synchronize lifecycle state (#6138)

2026-07-29 21:00:29 +02:00

xray_log_confine_test.go

fix(xray): confine log paths written under any key case

2026-09-03 18:06:15 +02:00

xray_metrics_test.go

Bug-label issue sweep: 16 fixes (#6083)

2026-07-23 15:34:42 +02:00

xray_metrics.go

Bug-label issue sweep: 16 fixes (#6083)

2026-07-23 15:34:42 +02:00

xray_process_test_seam.go

chore(node): cover the sync tick's online prune from the job package

2026-09-15 20:39:32 +02:00

xray_restart_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

xray_setting_dns_qtype_test.go

fix(xray): stop a lone dns qType 0 from matching every query

2026-09-15 16:00:05 +02:00

xray_setting_dns_routing_test.go

Bug-label issue sweep: 16 fixes (#6083)

2026-07-23 15:34:42 +02:00

xray_setting_dns_routing.go

Bug-label issue sweep: 16 fixes (#6083)

2026-07-23 15:34:42 +02:00

xray_setting_routing_sync_test.go

fix(xray): read the last two inboundTag protocol ids like the core (#6530)

2026-09-14 21:18:31 +03:00

xray_setting_routing_sync.go

fix(xray): read the last two inboundTag protocol ids like the core (#6530)

2026-09-14 21:18:31 +03:00

xray_setting_test.go

fix: gate embedded unencrypted-outbound rejection on running Xray core version (#6028)

2026-07-21 15:51:46 +02:00

xray_setting.go

fix(xray): stop a lone dns qType 0 from matching every query

2026-09-15 16:00:05 +02:00

xray_strip_rules_test.go

…

xray_wireguard_config_test.go

feat(clients): let admins set PersistentKeepalive on tunnel clients (#6377)

2026-09-10 22:32:42 +02:00

xray_xhttp_session_test.go

…

xray.go

fix(xray): restart when a diff strands a client's live session (#6550)

2026-09-15 15:39:40 +03:00