mirror of
https://github.com/MHSanaei/3x-ui.git
synced 2026-05-08 14:36:13 +00:00
10ebc6cbdc
* Implement CSRF protection and security hardening across the application - Added CSRF token handling in axios requests and HTML templates. - Introduced CSRF middleware to validate tokens for unsafe HTTP methods. - Implemented login limiter to prevent brute-force attacks. - Enhanced security headers in middleware for improved response security. - Updated login notification to include safe metadata without passwords. - Added tests for CSRF middleware and login limiter functionality. * fix
107 lines
3.1 KiB
HTML
107 lines
3.1 KiB
HTML
{{ define "page/head_start" }}
|
||
<!DOCTYPE html>
|
||
<html>
|
||
|
||
<head>
|
||
<meta charset="UTF-8">
|
||
<meta name="renderer" content="webkit">
|
||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||
<meta name="robots" content="noindex,nofollow">
|
||
{{ if .csrf_token }}<meta name="csrf-token" content="{{ .csrf_token }}">{{ end }}
|
||
<link rel="stylesheet" href="{{ .base_path }}assets/ant-design-vue/antd.min.css">
|
||
<link rel="stylesheet" href="{{ .base_path }}assets/css/custom.min.css?{{ .cur_ver }}">
|
||
<style>
|
||
[v-cloak] {
|
||
display: none;
|
||
}
|
||
|
||
/* vazirmatn-regular - arabic_latin_latin-ext */
|
||
@font-face {
|
||
font-display: swap;
|
||
font-family: 'Vazirmatn';
|
||
font-style: normal;
|
||
font-weight: 400;
|
||
src: url('{{ .base_path }}assets/Vazirmatn-UI-NL-Regular.woff2') format('woff2');
|
||
unicode-range: U+0600-06FF, U+200C-200E, U+2010-2011, U+204F, U+2E41, U+FB50-FDFF, U+FE80-FEFC, U+0030-0039;
|
||
}
|
||
|
||
body {
|
||
font-family: system-ui, -apple-system, BlinkMacSystemFont, 'Vazirmatn', 'Segoe UI', Roboto, Oxygen, Ubuntu, Cantarell, 'Open Sans', 'Helvetica Neue', sans-serif;
|
||
}
|
||
|
||
/* mobile touch scrolling for tabs */
|
||
@media (max-width: 576px) {
|
||
.ant-tabs-nav-container {
|
||
overflow-x: auto !important;
|
||
-webkit-overflow-scrolling: touch;
|
||
scroll-behavior: smooth;
|
||
overscroll-behavior-x: contain;
|
||
white-space: nowrap;
|
||
max-width: 100%;
|
||
padding: 0 !important;
|
||
/* Remove padding for arrows */
|
||
}
|
||
|
||
.ant-tabs-nav-wrap {
|
||
overflow: visible !important;
|
||
padding: 0 !important;
|
||
}
|
||
|
||
.ant-tabs-nav-scroll {
|
||
overflow: visible !important;
|
||
box-shadow: none !important;
|
||
}
|
||
|
||
.ant-tabs-nav {
|
||
display: flex !important;
|
||
transform: none !important;
|
||
/* Disable JS transform */
|
||
width: auto !important;
|
||
margin: 0 !important;
|
||
}
|
||
|
||
.ant-tabs-tab-prev,
|
||
.ant-tabs-tab-next {
|
||
display: none !important;
|
||
/* Hide arrows */
|
||
}
|
||
|
||
.ant-tabs-nav-container::-webkit-scrollbar {
|
||
display: none;
|
||
}
|
||
}
|
||
</style>
|
||
<title>{{ .host }} – {{ i18n .title}}</title>
|
||
{{ end }}
|
||
|
||
{{ define "page/head_end" }}
|
||
</head>
|
||
{{ end }}
|
||
|
||
{{ define "page/body_start" }}
|
||
|
||
<body>
|
||
<div id="message"></div>
|
||
{{ end }}
|
||
|
||
{{ define "page/body_scripts" }}
|
||
<script src="{{ .base_path }}assets/vue/vue.min.js?{{ .cur_ver }}"></script>
|
||
<script src="{{ .base_path }}assets/moment/moment.min.js"></script>
|
||
<script src="{{ .base_path }}assets/ant-design-vue/antd.min.js"></script>
|
||
<script src="{{ .base_path }}assets/axios/axios.min.js?{{ .cur_ver }}"></script>
|
||
<script src="{{ .base_path }}assets/qs/qs.min.js"></script>
|
||
<script src="{{ .base_path }}assets/js/axios-init.js?{{ .cur_ver }}"></script>
|
||
<script src="{{ .base_path }}assets/js/util/index.js?{{ .cur_ver }}"></script>
|
||
<script>
|
||
const basePath = '{{ .base_path }}';
|
||
axios.defaults.baseURL = basePath;
|
||
</script>
|
||
<script src="{{ .base_path }}assets/js/websocket.js?{{ .cur_ver }}"></script>
|
||
{{ end }}
|
||
|
||
{{ define "page/body_end" }}
|
||
</body>
|
||
|
||
</html>
|
||
{{ end }}
|