Commit Graph

9 Commits

Author SHA1 Message Date
Farhad H. P. Shirvan 10ebc6cbdc Implement CSRF protection and security hardening across the application (#4179)
* Implement CSRF protection and security hardening across the application

- Added CSRF token handling in axios requests and HTML templates.
- Introduced CSRF middleware to validate tokens for unsafe HTTP methods.
- Implemented login limiter to prevent brute-force attacks.
- Enhanced security headers in middleware for improved response security.
- Updated login notification to include safe metadata without passwords.
- Added tests for CSRF middleware and login limiter functionality.

* fix
2026-05-07 23:36:11 +02:00
mhsanaei 3f62592e4b API improve security: returns 404 for unauthenticated API requests 2025-09-24 11:29:55 +02:00
mhsanaei 6ced549dea docs: add comments for all functions 2025-09-20 09:35:50 +02:00
Sanaei fe9f0d1d0e api (#3434) 2025-09-09 02:32:05 +02:00
Alireza Ahmadi 2a8da2ba3c separate xray page #1286 2023-12-04 19:20:46 +01:00
Hamidreza Ghavami b0871a6ef6 Change route path '/xui' to '/panel' 2023-05-12 22:45:32 +04:30
Hamidreza Ghavami 481d4beabb update translation 2023-05-04 22:22:54 +04:30
Hamidreza Ghavami 4f8de18d1f renamed setting.html to settings.html and update its route name 2023-05-04 21:09:08 +04:30
MHSanaei b73e4173a3 3x-ui 2023-02-09 22:48:06 +03:30