3 Commits

Author	SHA1	Message	Date
xfy	b5c3c0954f	fix: address repository review issues ... Security: - Enforce client_max_body_size in HTTP/2 and HTTP/3 adapters before buffering - Use trusted-proxy-aware client IP extraction for access control and rate limiting - Include Host and Vary headers in proxy cache key to prevent cache poisoning - Harden static file path traversal check with filepath.Clean + prefix validation - Honor proxy_ssl config for WebSocket upstream TLS Proxy/handler bugs: - Decrement WebSocket connection count immediately on return (not deferred in retry loop) - Remove ineffective headersPool - Coalesce concurrent background cache refreshes with singleflight Dev/build: - Fix Makefile run and test-config targets - Remove broken wget healthcheck from docker-compose - Add missing integration build tags - Fix go vet warnings in tests CI: - Run golangci-lint and integration tests in Gitea Actions Refs: docs/superpowers/plans/2026-06-17-fix-review-issues.md	2026-06-17 11:17:53 +08:00
xfy	8b382606df	Merge branch 'lint-fix' - resolve sendfile.go conflict ... Conflict: sendfile.go (!linux build tag) was incorrectly modified to include linuxSendfile and getSocketFd functions which already exist in sendfile_linux.go. Resolution: Keep HEAD version (simple fallback returning ENOTSUP) as Linux implementation is properly separated in sendfile_linux.go. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-04-13 09:26:48 +08:00
xfy	9495a548e6	feat(proxy,server,logging): 集成变量系统和 DNS 解析器 ... 变量系统集成： - logging: 访问日志使用 variable 包展开模板 - rewrite: 重写规则支持变量展开 - proxy: 请求/响应头设置支持变量展开 DNS 解析器集成： - app: 创建并启用 Resolver - server: SetResolver/GetResolver 方法传递给 proxy - proxy: SetResolver/Start 方法，后台 DNS 刷新协程 - proxy_dns.go: DNS 刷新逻辑和 IP 直连支持 新增集成测试： - internal/integration/variable_test.go - internal/integration/resolver_test.go 文档更新： - docs/config-reference.md 配置参考文档 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-04-08 11:36:49 +08:00