Mirrors/wg-portal
1
0
Fork 0
mirror of https://github.com/h44z/wg-portal.git synced 2026-06-15 14:28:14 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Merge commit from fork

Browse Source 
* sec: do not expose traffic stats to all users, harden origin check in websocket endpoint

* add tests to validate new logic
This commit is contained in:
h44z
2026-06-05 20:13:18 +02:00
committed by GitHub
parent e3dc31a133
commit 316f389f11
3 changed files with 271 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
cmd/wg-portal/main.go
View File

@@ -135,7 +135,7 @@ func main() {
apiV0EndpointPeers := handlersV0.NewPeerEndpoint(cfg, apiV0Auth, validatorManager, apiV0BackendPeers)
apiV0EndpointConfig := handlersV0.NewConfigEndpoint(cfg, apiV0Auth, wireGuard)
apiV0EndpointTest := handlersV0.NewTestEndpoint(apiV0Auth)
apiV0EndpointWebsocket := handlersV0.NewWebsocketEndpoint(cfg, apiV0Auth, eventBus)
apiV0EndpointWebsocket := handlersV0.NewWebsocketEndpoint(cfg, apiV0Auth, eventBus, apiV0BackendPeers)
apiFrontend := handlersV0.NewRestApi(apiV0Session,
apiV0EndpointAuth,