|
|
cad0458f1e
|
fix: security hardening — sanitize config input, atomic writes, error leak, rate limit, dead code
|
2026-07-24 11:51:54 +00:00 |
|
|
|
45ad3a2b9b
|
docs: add README.md with install guide, remove redundant setup.sh
|
2026-07-24 11:36:56 +00:00 |
|
|
|
026c97598b
|
fix: add zoraxy.csrf.Token meta tag needed by $.cjax()
|
2026-07-24 11:21:25 +00:00 |
|
|
|
81271b6ce6
|
fix: load jQuery and utils.js (needed for $.cjax()) from Zoraxy paths
|
2026-07-24 11:12:50 +00:00 |
|
|
|
4f48790a5a
|
fix: use $.cjax() (Zoraxy CSRF-safe AJAX wrapper) instead of raw fetch()
|
2026-07-24 11:09:00 +00:00 |
|
|
|
76e7fc3d5c
|
fix: switch to form-encoded POST + CSRF as query param + form field
|
2026-07-24 10:54:45 +00:00 |
|
|
|
78cae8dea4
|
fix: only add CSRF body field on POST requests, not GET
|
2026-07-24 10:51:20 +00:00 |
|
|
|
037791bbd5
|
fix: send CSRF token in POST body field, header, and X-CSRF-Token header
|
2026-07-24 10:30:57 +00:00 |
|
|
|
8b0bd75f29
|
fix: reload returns 200 JSON on error, fix missing buttons, handle non-JSON responses, add -buildvcs=false
|
2026-07-24 10:08:12 +00:00 |
|
|
|
e14164921c
|
fix: add || true to all read commands, disable pipefail during detect_defaults
|
2026-07-24 09:53:38 +00:00 |
|
|
|
c7cd5550bc
|
fix: handle pipefail exits in detect_defaults, docker ps, and curl|jq pipelines
|
2026-07-24 09:48:58 +00:00 |
|
|
|
e1260ba5d3
|
feat: add --remove flag to install.sh for clean uninstall
|
2026-07-24 09:41:00 +00:00 |
|
|
|
b360ffd6af
|
feat: add multi-OS interactive install script, update default paths to /opt/zoraxy/conf/dhcp/
|
2026-07-24 09:37:08 +00:00 |
|
|
|
d1e2908fdc
|
chore: initial commit of dhcp-lease-manager plugin
|
2026-07-24 09:17:04 +00:00 |
|
