fix: Security Vulnerability Repair + Export IP Data Model Refactoring + VNC/entry Network Stability Repair#8
Open
zanyatta wants to merge 6 commits into
Open
fix: Security Vulnerability Repair + Export IP Data Model Refactoring + VNC/entry Network Stability Repair#8zanyatta wants to merge 6 commits into
zanyatta wants to merge 6 commits into
Conversation
…entials
GET/v1/users anonymously returns password_ ash/entry_ password/sh_private_key; Delete together
Unauthorized/v1/hosts,/v1/tasks,/v1/hosts/{id}/{create, start, stop, rebuild}.
The function has been overridden by/v1/admin/* and/v1/user/*, removing the dedicated implementation of hosts.go.
Signed-off-by: 云龙 <zanyatta@qq.com>
When the machine with sshpass is running on the sshpass branch, it is missing - tt and</dev/tty. In curl | bash, what is the standard input The pipeline caused SSH to be unable to allocate PTY and the interactive shell to freeze. Add - tt to force PTY+</dev/tty. Signed-off-by: 云龙 <zanyatta@qq.com>
…, fixed random 1006 Handwritten proxy WebSocket writes bare TCP connections field by field without verifying write errors, In concurrent/sequential situations, there may be interruptions in the write request header and loss of Sec WebSocket Key, etc Shaking hands caused KasmVNC to fail to complete the upgrade and the browser to randomly report code 1006. Signed-off-by: 云龙 <zanyatta@qq.com>
…ss to label - Adopting the sub table reconstruction method: temporarily storing host_ egress-bindings → DROP → rebuilding egress_ips (label UNIQUE, ipaddress can be empty or duplicated) → restoring sub tables and indexes according to the original definition of 0001 - Do not use PRAGMA defer_foreign_keys (still reporting FK failed (787) when tested on COMMIT, unavailable) - New migration_0003_test.go: file library+SetMaxOpenConns (1)+FK=ON assertion+real scene of pre migration insertion binding data, verifying the sub table reconstruction method through REST constraints Signed-off-by: 云龙 <zanyatta@qq.com>
…ase of the unique conflict. - Create:ip_address empty string release (vless/reality scenarios), non-empty illegal value still returns 400 - Create/Update:strings.ToLower matches. New label already exists - Update: Add a unique conflict handling branch (originally missing) - new tests: empty ip 201, label duplicate 409, and update label duplicate 409 Signed-off-by: 云龙 <zanyatta@qq.com>
… and left blank for back-end detection backfill. The back end has gone to the ip_address NOT NULL/UNIQUE, and the old placeholder is the culprit of the collision of the unique key with the landing IP multi-line. Only when the user explicitly fills in the ip_address, the back-end storage is empty, and the verification phase SOCKS5 detection automatically backfills the real exit IP. Signed-off-by: 云龙 <zanyatta@qq.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Overview
This entry contains six submissions, mainly focusing on three directions: security vulnerability repair, export IP data model reconstruction, and VNC / SSH ingress network stability repair.
Change Details