发布

  • feat(api): add support for local management password validation and spoofed IP rejection

    frostbyte_neo 发布于 2026-05-17 17:23:35 +00:00

    • Introduced newTestServerWithOptions to customize server initialization in tests.
    • Added TestManagementLocalPasswordRejectsSpoofedForwardedFor to validate security against spoofed X-Forwarded-For headers.
    • Enabled default WebSocket authentication (ws-auth) in config.example.yaml.
    • Disabled trusted proxy headers in Gin engine with appropriate logging to enhance security.
    下载附件