MHSanaei 3af45c1462 fix: Add base-path meta tag for Cloudflare Rocket Loader compatibility ...

When Cloudflare Rocket Loader is enabled, it interferes with inline scripts that set window.X_UI_BASE_PATH, causing the frontend to fail to configure the correct base URL for API calls. This results in 404 errors on the login page when calling /getTwoFactorEnable.

Solution: Add meta name='base-path' tag to HTML (similar to csrf-token), update axios initialization to read from meta tag as fallback. Meta tags are not affected by CSP or Rocket Loader delays.

Fixes #4393

2026-05-14 23:37:25 +02:00

..

controller

fix: Add base-path meta tag for Cloudflare Rocket Loader compatibility

2026-05-14 23:37:25 +02:00

entity

Add possibility to remove client email from sub (#4297)

2026-05-13 19:04:17 +02:00

global

Refactor code and fix linter warnings (#3627)

2026-01-05 05:54:56 +01:00

job

fix(inbounds): refresh client rows live over websocket

2026-05-14 01:31:49 +02:00

locale

v3

2026-05-10 02:13:42 +02:00

middleware

Security hardening: sessions, SSRF, CSP nonce, CSRF logout, trusted proxies (#4275)

2026-05-13 12:52:52 +02:00

network

docs: add comments for all functions

2025-09-20 09:35:50 +02:00

runtime

fix: preserve TLS cert file paths when deploying inbound to remote node

2026-05-14 12:41:08 +02:00

service

Remove streamSettings for protocols that don't support it

2026-05-14 23:18:23 +02:00

session

Security hardening: sessions, SSRF, CSP nonce, CSRF logout, trusted proxies (#4275)

2026-05-13 12:52:52 +02:00

translation

Add possibility to remove client email from sub (#4297)

2026-05-13 19:04:17 +02:00

websocket

feat(nodes): traffic-writer queue, full-mirror sync, WS event fixes

2026-05-10 16:25:23 +02:00

web.go

Security hardening: sessions, SSRF, CSP nonce, CSRF logout, trusted proxies (#4275)

2026-05-13 12:52:52 +02:00