Qiaochu Hu 24cd271486 Fix overly permissive file permissions (os.ModePerm) (#4207) ...

Several file operations used os.ModePerm (0777) which makes files
world-writable and world-readable, violating the principle of least
privilege:

- database/db.go: InitDB directory creation → 0755
- xray/process.go: Xray config write → 0644
- xray/process.go: Crash report write → 0644
- web/service/server.go: Binary extraction → 0755

Also removes unused "io/fs" imports from the affected files.

2026-05-10 14:47:28 +02:00

..

config.json

dokodemo-door, socks renamed to mixed, tunnel

2025-09-09 13:57:40 +02:00

custom_geo_test.go

v3

2026-05-10 02:13:42 +02:00

custom_geo.go

v3

2026-05-10 02:13:42 +02:00

inbound.go

v3

2026-05-10 02:13:42 +02:00

metric_history.go

Vue3 migration (#4198)

2026-05-09 17:47:35 +02:00

node.go

v3

2026-05-10 02:13:42 +02:00

nord.go

v3

2026-05-10 02:13:42 +02:00

outbound.go

v3

2026-05-10 02:13:42 +02:00

panel_other.go

feat: add panel update functionality via web GUI (#4117)

2026-04-28 18:46:55 +02:00

panel_test.go

feat: add panel update functionality via web GUI (#4117)

2026-04-28 18:46:55 +02:00

panel_unix.go

feat: add panel update functionality via web GUI (#4117)

2026-04-28 18:46:55 +02:00

panel.go

v3

2026-05-10 02:13:42 +02:00

port_conflict_test.go

v3

2026-05-10 02:13:42 +02:00

port_conflict.go

v3

2026-05-10 02:13:42 +02:00

server.go

Fix overly permissive file permissions (os.ModePerm) (#4207)

2026-05-10 14:47:28 +02:00

setting.go

v3

2026-05-10 02:13:42 +02:00

tgbot_test.go

Implement CSRF protection and security hardening across the application (#4179)

2026-05-07 23:36:11 +02:00

tgbot.go

v3

2026-05-10 02:13:42 +02:00

user.go

v3

2026-05-10 02:13:42 +02:00

warp.go

v3

2026-05-10 02:13:42 +02:00

websocket.go

v3

2026-05-10 02:13:42 +02:00

xray_setting_test.go

xray-setting: pin api routing rule to index 0 on save (#4124)

2026-04-28 17:49:39 +02:00

xray_setting.go

v3

2026-05-10 02:13:42 +02:00

xray.go

fix(nodes): bind form-encoded posts and skip node inbounds in central xray

2026-05-10 11:32:06 +02:00