ginuerzh dd65d46926 fix(handler/http): sync Gost-Target override into req.URL.Host to prevent policy bypass ...

A valid Gost-Target / X-Gost-Target header replaced only req.Host while
leaving req.URL.Host untouched. Destination-policy checks (bypass) evaluated
the header-derived authority, but http.Transport dialed the unchanged
absolute-URL authority. A client could label a forbidden URL with an allowed
authority and reach the blocked destination (403 -> 200 with backend body).

setRequestHost now applies the decoded target to both req.Host and req.URL.Host
so policy evaluation and transport dialing always resolve to the same authority.

2026-08-27 20:16:22 +08:00

..

api

fix(handler/api): add nil guard, propagate Shutdown error, doc comments, 20 tests

2026-05-26 20:44:23 +08:00

auto

fix(handler/auto): sniff SOCKS4/SOCKS5 with 1-byte peek before 5-byte Sniff()

2026-06-26 20:17:49 +08:00

dns

feat(dns): use system nameservers from /etc/resolv.conf as fallback

2026-06-20 15:54:39 +08:00

file

fix(listener/tap): support custom TAP adapter name on Windows (issue #772)

2026-06-08 20:05:57 +08:00

forward

fix(tunnel, forward): route tunneled hostname through hop filter.host

2026-08-26 20:28:37 +08:00

http

fix(handler/http): sync Gost-Target override into req.URL.Host to prevent policy bypass

2026-08-27 20:16:22 +08:00

http2

fix: add status field to service list/detail APIs, unify observeStats retry pattern, fix router bugs

2026-06-03 22:12:08 +08:00

http3

add service option for plugin

2025-08-29 23:36:31 +08:00

masque

fix(masque): repair server CONNECT-UDP relay (#122)

2026-08-17 23:05:00 +08:00

metrics

fix(metrics): add cross-platform process metrics collector for non-Linux systems

2026-06-21 21:55:27 +08:00

redirect

x: extract shared QUIC sniffing helpers, add redirect UDP QUIC sniff

2026-08-01 16:03:23 +08:00

relay

refactor(sniffing): register protocol handlers via init() registries

2026-08-25 21:35:45 +08:00

router

fix(handler/router): 3 bugs fixed + comprehensive data-flow documentation

2026-06-05 20:46:00 +08:00

serial

fix(handler/serial,sni): 5 code-review fixes - xnet.Pipe errors, (nil,nil) warning, readTimeout comment, defer deadline, clean close

2026-06-05 21:09:10 +08:00

sni

refactor(sniffing): register protocol handlers via init() registries

2026-08-25 21:35:45 +08:00

socks

feat(socks5): add Tor RESOLVE/RESOLVE_PTR extension command support (gost#524)

2026-07-16 21:10:13 +08:00

ss

fix: prevent double-recording when HTTP response cache is enabled

2026-07-26 20:11:36 +08:00

sshd

fix(sniffing): pass bypass option to sniffer HandleHTTP/HandleTLS calls

2026-06-23 20:54:26 +08:00

tap

Adapt new shadowsocks library.

2025-11-11 12:37:33 +08:00

tun

fix(tun): prevent leaked goroutines in bidirectional copy on transport failure

2026-06-20 22:10:09 +08:00

tungo

fix: add status field to service list/detail APIs, unify observeStats retry pattern, fix router bugs

2026-06-03 22:12:08 +08:00

tunnel

x: wire MetadataFeature (relay v0.7.0) for tunnel recording mode negotiation

2026-07-24 22:19:41 +08:00

unix

fix: prevent double-recording when HTTP response cache is enabled

2026-07-26 20:11:36 +08:00