MHSanaei 8bbfda0510 fix(email): cap what one SMTP session reads from the server ...

net/smtp buffers a server reply of any length, so a mail server, or
anyone on the path before STARTTLS, could send a greeting or EHLO reply
that never ends and grow the panel's heap until the 30 s deadline, on
every notification.

Each session now reads at most 1 MiB from the server, below TLS, and
fails with a clear error past it.

2026-11-01 13:18:54 +01:00

..

controller

fix(api): cap the client traffic list a master pushes by entry count

2026-10-31 14:25:21 +01:00

entity

feat(hosts): give a host a pool of SNIs, random per config or shared (#6923)

2026-10-24 21:05:42 +02:00

global

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

job

fix(ldap): keep expired and over-quota clients off on directory sync

2026-11-01 00:44:05 +01:00

locale

fix(i18n): publish the translation bundle only once it is complete

2026-10-31 09:11:54 +00:00

middleware

fix(web): bound the panel's open connections and share asset gzip

2026-11-01 01:01:38 +01:00

network

fix(web): bound the panel's open connections and share asset gzip

2026-11-01 01:01:38 +01:00

runtime

fix(node): count only values against the node-answer value cap

2026-11-01 13:14:46 +01:00

service

fix(email): cap what one SMTP session reads from the server

2026-11-01 13:18:54 +01:00

session

fix(web): start a fresh session at login

2026-10-31 09:05:28 +00:00

translation

feat(tls): cipher suite presets and a uTLS fingerprint warning

2026-10-25 15:54:48 +01:00

websocket

fix(tuic): client speed display and certificate button layout (#6723)

2026-10-05 19:46:46 +02:00

assets_test.go

fix(web): bound the panel's open connections and share asset gzip

2026-11-01 01:01:38 +01:00

cadence_test.go

Add remote routing URL support (#6168)

2026-08-18 16:02:11 +02:00

node_contract_test.go

fix(node): drop a swept inbound's bookkeeping from the node runtime

2026-10-31 09:28:39 +00:00

routes_contract_test.go

fix(web): bound the panel's open connections and share asset gzip

2026-11-01 01:01:38 +01:00

schedule_test.go

fix(settings): accept five-field crontab for report and LDAP schedules

2026-10-11 20:37:04 +02:00

web_mtls_test.go

feat(node): node hardening — mTLS, hashed+zstd reconcile transport, per-node net metrics (#5382)

2026-06-16 12:19:33 +02:00

web_mtls.go

feat(node): node hardening — mTLS, hashed+zstd reconcile transport, per-node net metrics (#5382)

2026-06-16 12:19:33 +02:00

web_shutdown_test.go

fix(web): install the share-link provider before the panel serves (#6914)

2026-10-24 05:50:46 +02:00

web_sublink_test.go

fix(web): install the share-link provider before the panel serves (#6914)

2026-10-24 05:50:46 +02:00

web_tuic_shutdown_test.go

fix(web): install the share-link provider before the panel serves (#6914)

2026-10-24 05:50:46 +02:00

web.go

fix(web): bound the panel's open connections and share asset gzip

2026-11-01 01:01:38 +01:00