ginuerzh f4be111420 fix(handler/http): host validation with port split, sniffer ownership guard, body leak, probe resistance hardening ...

- Split host:port in Host header before DNS/IP validation, accept bare IPs
- Guard sniffer connection ownership with snifferHandled flag to prevent
  double-close when sniffers take over the tunnel
- Close req.Body in handleProxy keep-alive loop on both error and success
  paths to prevent goroutine leaks from idle HTTP transport connections
- Log all resp.Write errors (5 call sites) instead of silently discarding
- Respect resp.Close for all responses, not just ContentLength >= 0,
  fixing unnecessarily closed chunked keep-alive connections
- Harden probe resistance: validate strconv.Atoi result, add 15s timeout
  to web redirect HTTP client, document pr.Knock empty/set/mismatch logic

2026-05-28 21:32:06 +08:00

..

handler.go

fix(handler/http): host validation with port split, sniffer ownership guard, body leak, probe resistance hardening

2026-05-28 21:32:06 +08:00

metadata.go

Make pipe read timeout configurable via idleTimeout metadata

2026-05-08 11:31:53 +01:00

udp.go

add service option for plugin

2025-08-29 23:36:31 +08:00