fix(security): sanitize remote IP headers and escape log viewer output

#4135
2026-06-08 05:14:33 +00:00 · 2026-05-04 16:36:33 +02:00
parent 9f96ef83ec
commit c90f8a05bf
23 changed files with 147 additions and 85 deletions
--- a/web/html/form/tls_settings.html
+++ b/web/html/form/tls_settings.html
@@ -132,7 +132,7 @@

  <!-- reality settings -->
  <template v-if="inbound.stream.isReality">
-    {{template "form/realitySettings"}}
+    {{template "form/realitySettings" .}}
  </template>
 </a-form>
 {{end}}