- Add safeExternalHref(): only render http(s) URLs as clickable hrefs,
blocking attacker-controlled template metadata from becoming
javascript:/data: links.
- Refine CSRF header attachment and auth-loading state in the fetcher,
api-tokens client, useAuth, and settings route.
Co-authored-by: cloudcode <cloudcode@users.noreply.github.com>
Add the reserved_hosts setting (input + i18n across all locales) so operators
behind a reverse proxy can declare public dashboard hostnames members must not
register as NAT domains (GHSA-x6fg-52vr-hj4w).
Show the backend error message on NAT create/update failure instead of a
generic "unexpected error", so a reserved-host rejection is explained.
Co-authored-by: cloudcode <cloudcode@users.noreply.github.com>
Add an API tokens management route to create, list, and revoke PATs, showing
the plaintext token once on creation with scope and server-id selection.
Mirror the nz-csrf cookie into the X-CSRF-Token header on unsafe fetcher
methods (POST/PUT/PATCH/DELETE) for the server-side double-submit check, and
self-heal expired sessions via refresh-token without a recursive fetch loop.
Gate protected routes behind resolved auth state to avoid pre-auth SWR fetches,
and fix the login loading/race so stale probes cannot clobber the session.
Add i18n keys for the new screens across all locales.
Co-authored-by: cloudcode <cloudcode@users.noreply.github.com>
Settings page used a plain number input for ip_change_notification_group_id,
requiring users to manually enter a group ID. Replace it with a searchable
Combobox component (consistent with alert-rule/service/cron pages) and wrap
the settings route with NotificationProvider to load notification group data.
Closesnezhahq/nezha#1174
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba>
Settings page used a plain number input for ip_change_notification_group_id,
requiring users to manually enter a group ID. Replace it with a searchable
Combobox component (consistent with alert-rule/service/cron pages) and wrap
the settings route with NotificationProvider to load notification group data.
Closesnezhahq/nezha#1174
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba>
* feat: separate real ip header of frontend/agent
* test(ci): test
* Revert "test(ci): test"
This reverts commit 7d2f16ed24e5f95f6101dc3ac67816ece2dc5ade.
* chore: auto-fix linting and formatting issues
* feat: separate real ip header of frontend/agent
* test(ci): test
* Revert "test(ci): test"
This reverts commit 7d2f16ed24e5f95f6101dc3ac67816ece2dc5ade.
* chore: auto-fix linting and formatting issues
* fix: window.DisableAnimatedMan as boolean
* chore: auto-fix linting and formatting issues
* feat: user role
* feat: use user agent_secret
* feat: hide setting when user role is not admin
* feat: new waf api
* chore: auto-fix linting and formatting issues
* fix: admin settings page
* feat: online-user setting
* fix: pagination
---------
Co-authored-by: hamster1963 <hamster1963@users.noreply.github.com>
* fix: window.DisableAnimatedMan as boolean
* chore: auto-fix linting and formatting issues
* feat: user role
* feat: use user agent_secret
* feat: hide setting when user role is not admin
* feat: new waf api
* chore: auto-fix linting and formatting issues
* fix: admin settings page
* feat: online-user setting
* fix: pagination
---------
Co-authored-by: hamster1963 <hamster1963@users.noreply.github.com>
* fix: use system as defaultTheme
* chore: auto-fix linting and formatting issues
* fix: AnimatedMan position on login page
* fix: login form overflow on mobile
* fix: theme selected value display overflow
* fix: dropdown menu username overflow
---------
Co-authored-by: hamster1963 <hamster1963@users.noreply.github.com>
* fix: use system as defaultTheme
* chore: auto-fix linting and formatting issues
* fix: AnimatedMan position on login page
* fix: login form overflow on mobile
* fix: theme selected value display overflow
* fix: dropdown menu username overflow
---------
Co-authored-by: hamster1963 <hamster1963@users.noreply.github.com>
* Translated using Weblate (Chinese (Traditional Han script))
Currently translated at 100.0% (158 of 158 strings)
Translated using Weblate (Chinese (Simplified Han script))
Currently translated at 100.0% (158 of 158 strings)
Translated using Weblate (English)
Currently translated at 100.0% (158 of 158 strings)
Translated using Weblate (English)
Currently translated at 100.0% (158 of 158 strings)
Translated using Weblate (Chinese (Traditional Han script))
Currently translated at 100.0% (158 of 158 strings)
Translated using Weblate (Chinese (Simplified Han script))
Currently translated at 96.8% (153 of 158 strings)
Translated using Weblate (Italian)
Currently translated at 69.6% (110 of 158 strings)
Translated using Weblate (English)
Currently translated at 100.0% (158 of 158 strings)
Translated using Weblate (Chinese (Traditional Han script))
Currently translated at 99.3% (157 of 158 strings)
Translated using Weblate (Chinese (Simplified Han script))
Currently translated at 70.8% (112 of 158 strings)
Translated using Weblate (Italian)
Currently translated at 99.3% (157 of 158 strings)
Translated using Weblate (English)
Currently translated at 100.0% (158 of 158 strings)
Co-authored-by: Anonymous <noreply@weblate.org>
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: UUBulb <uub@kuzu.uk>
Translate-URL: https://hosted.weblate.org/projects/nezha/admin-frontend/en/
Translate-URL: https://hosted.weblate.org/projects/nezha/admin-frontend/it/
Translate-URL: https://hosted.weblate.org/projects/nezha/admin-frontend/zh_Hans/
Translate-URL: https://hosted.weblate.org/projects/nezha/admin-frontend/zh_Hant/
Translation: Nezha/Admin frontend
* chore: auto-fix linting and formatting issues
---------
Co-authored-by: UUBulb <uub@kuzu.uk>
Co-authored-by: weblate <weblate@users.noreply.github.com>
* Translated using Weblate (Chinese (Traditional Han script))
Currently translated at 100.0% (158 of 158 strings)
Translated using Weblate (Chinese (Simplified Han script))
Currently translated at 100.0% (158 of 158 strings)
Translated using Weblate (English)
Currently translated at 100.0% (158 of 158 strings)
Translated using Weblate (English)
Currently translated at 100.0% (158 of 158 strings)
Translated using Weblate (Chinese (Traditional Han script))
Currently translated at 100.0% (158 of 158 strings)
Translated using Weblate (Chinese (Simplified Han script))
Currently translated at 96.8% (153 of 158 strings)
Translated using Weblate (Italian)
Currently translated at 69.6% (110 of 158 strings)
Translated using Weblate (English)
Currently translated at 100.0% (158 of 158 strings)
Translated using Weblate (Chinese (Traditional Han script))
Currently translated at 99.3% (157 of 158 strings)
Translated using Weblate (Chinese (Simplified Han script))
Currently translated at 70.8% (112 of 158 strings)
Translated using Weblate (Italian)
Currently translated at 99.3% (157 of 158 strings)
Translated using Weblate (English)
Currently translated at 100.0% (158 of 158 strings)
Co-authored-by: Anonymous <noreply@weblate.org>
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: UUBulb <uub@kuzu.uk>
Translate-URL: https://hosted.weblate.org/projects/nezha/admin-frontend/en/
Translate-URL: https://hosted.weblate.org/projects/nezha/admin-frontend/it/
Translate-URL: https://hosted.weblate.org/projects/nezha/admin-frontend/zh_Hans/
Translate-URL: https://hosted.weblate.org/projects/nezha/admin-frontend/zh_Hant/
Translation: Nezha/Admin frontend
* chore: auto-fix linting and formatting issues
---------
Co-authored-by: UUBulb <uub@kuzu.uk>
Co-authored-by: weblate <weblate@users.noreply.github.com>
Bot
Copilot
naiba
ChilllnandGuccen
TomyJan
UUBulb
仓鼠
