Mirror-Proxy

7 Commits

Include renames

Author	SHA1	Message	Date
AgentandHAPI	6fcde70a26	fix: force href to absolute http URLs and strip HSTS/CSP headers Build and Push to GHCR / build-and-push (push) Has been cancelled Details Upstream servers (e.g. GitHub) send Strict-Transport-Security and Content-Security-Policy headers that cause browsers to upgrade HTTP URLs to HTTPS. Strip those headers in ModifyResponse. Also save the original request host/protocol in context before Director mutates req.Host, then rewrite href attributes to explicit absolute URLs (e.g. http://host/{token}/path) so the browser doesn't guess the scheme. via [HAPI](https://hapi.run) Co-Authored-By: HAPI <[email protected]>	2026-05-24 21:01:48 +08:00
AgentandHAPI	163e625495	fix: remove unsupported regexp backreferences causing panic Build and Push to GHCR / build-and-push (push) Has been cancelled Details Go's regexp package uses RE2 syntax which does not support \1, \2 backreferences. Replace the regex-based refresh/CSS URL rewriting with plain string scanning to avoid the init() panic. via [HAPI](https://hapi.run) Co-Authored-By: HAPI <[email protected]>	2026-05-24 19:26:13 +08:00
AgentandHAPI	f13f294d04	fix: server-side HTML URL rewriting to bypass CSP blocking Build and Push to GHCR / build-and-push (push) Has been cancelled Details JS injection fails on sites with strict Content-Security-Policy (e.g. GitHub). Add golang.org/x/net/html-based server-side rewriting of URL attributes (href/src/action/etc.) and CSS url() values before response is sent. Keep JS injection as fallback for dynamic content. via [HAPI](https://hapi.run) Co-Authored-By: HAPI <[email protected]>	2026-05-24 17:44:35 +08:00
AgentandHAPI	f03eacaf20	fix: rewrite proxy links with token prefix and correct login redirect Build and Push to GHCR / build-and-push (push) Has been cancelled Details - Add ModifyResponse to DynamicProxy to inject token-prefix JS and rewrite Location headers, same as GitHub proxy already did. - Improve injectTokenPrefixScript to rewrite href/src/action on page load and watch for dynamically added elements via MutationObserver. - Replace hardcoded ../ login redirect with pathname-based calculation so it works regardless of admin_path config. via [HAPI](https://hapi.run) Co-Authored-By: HAPI <[email protected]>	2026-05-24 17:27:38 +08:00
AgentandHAPI	d6623fc150	feat: per-link IP whitelist, clipboard fallback, and link editing Build and Push to GHCR / build-and-push (push) Has been cancelled Details - Add `allowed_ips` to Link model with IPv4/IPv6 and CIDR support - Validate client IP in proxy auth middleware against link whitelist - Extract client IP from X-Forwarded-For / X-Real-Ip headers - Fix copy button for non-HTTPS contexts via execCommand fallback - Allow editing existing links (name, type, auth mode, rate limit, IPs) - Add dedicated IP whitelist modal for quick editing via [HAPI](https://hapi.run) Co-Authored-By: HAPI <[email protected]>	2026-05-24 17:14:35 +08:00
AgentandHAPI	fdbb824b7e	feat: support arbitrary URL proxy via single token Build and Push to GHCR / build-and-push (push) Has been cancelled Details Allow proxying to any URL through the single-token auth path: - /TOKEN/https://target.com/path - /TOKEN/https:/target.com/path (browser-normalized) - /TOKEN/target.com/path (auto-prefixed with https:// for known domains) Also fix single-mode path handling that previously dropped parts[2] when SplitN produced 3 parts. via [HAPI](https://hapi.run) Co-Authored-By: HAPI <[email protected]>	2026-05-24 16:22:02 +08:00
Agent	9223e35164	feat: init mirror-proxy project Build and Push to GHCR / build-and-push (push) Has been cancelled Details - Docker Hub / GHCR / GitHub reverse proxy - Web admin panel with link management - Dynamic admin path, user and password config - Rate limiting per link (dual/single auth mode) - Docker and docker-compose deployment support - GitHub Actions workflow for auto-publish to GHCR	2026-05-24 15:27:45 +08:00