Issues - NixMsg - Nixevol Gitea

Labels Milestones New Issue

[L-07][low] 监听与 HTTP 小问题合集：XFF 解析可伪造、每连接新建 tls.Config、/metrics 令牌非常量时间比较、重复创建 listener P3-low lane/listener review-2026-09-30

by nixevol was closed 2026-09-30 16:35:57 +08:00

[L-06][medium] 健康检查只会明文：配了证书并关闭明文时必失败，Docker 示例配置因此默认开着明文 P2-medium lane/listener review-2026-09-30

by nixevol was closed 2026-09-30 16:35:56 +08:00

[L-05][medium] 后台静态页没有前端路由回退：刷新或直接打开二级页面返回 404，访问目录会列出文件 P2-medium lane/listener review-2026-09-30

by nixevol was closed 2026-09-30 16:35:56 +08:00

[L-04][high] NixMsg 直接终止 TLS 时 r.TLS 为空，后台 Cookie 不带 Secure P1-high lane/listener review-2026-09-30

by nixevol was closed 2026-09-30 16:35:55 +08:00

[L-03][high] 有 MQTT 连接时停机退不出，还可能向已关闭通道发送而 panic P1-high lane/listener review-2026-09-30

by nixevol was closed 2026-09-30 16:35:55 +08:00

[L-02][high] accept 出一次错就永久停止接受新连接 P1-high lane/listener review-2026-09-30

by nixevol was closed 2026-09-30 16:35:54 +08:00

[L-01][high] 握手前阶段没有超时与并发上限：TLS 握手、CONNECT 之前、WebSocket 升级后、HTTP 空闲长连接都能无限占用资源 P1-high lane/listener review-2026-09-30

by nixevol was closed 2026-09-30 16:35:53 +08:00