z2k/rt-proxy
Necronicle 28f751f971 fix: post-review batch (r-55) — QUIC morph, rt-proxy prune, detector guards, webpanel hardening
Reviewed post-review fixes; field-check/unreviewed items held out.
- z2k-modern-core.lua: QUIC morph profile-3 fragmentation (B2) + drop live-CH morph that broke RFC9001 AEAD (B3)
- rt-proxy: bound p.all (rebuild seed∪resolved∪live) instead of append-only growth (B4)
- prober h2/prober: don't classify GOAWAY/rate-limit/read-timeout as a DPI block (conservative); thread real ctx
- dnssrc: A-only dnsmasq query filter (parity with agh.go)
- tg-watchdog: kill only the :1443 instance, spare cdnbase :1444; fix-tg-watchdog -> harmless no-op (stale downgrade-patcher)
- webpanel api.sh: pre-eval command-injection guard on policy_save; actions.sh: drop inert $'\t' patterns
- S99z2k-scheduler: respawn supervisor; scheduler.sh: flash-wear epoch-state split to tmpfs
- geosite: asset-class-aware 80% shrink guard (allows big<->small RKN class switch); update-lists/auto-update: ndmc streak gate + content guard + utils sourcing
- config_official: set -f glob guard on hand-edited Strategy.txt tokens + FLOWOFFLOAD heredoc interpolation fix; Discord voice UDP top port 50099->50100 (match flowseal)
- auto_update: guard empty/CR/drifted installed-tag against nightly false reinstall(+reset_state)
- strategies: fix line-1 strategy drop + subshell counter loss
- ci: extend shellcheck scope to webpanel/cgi

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-11 00:29:09 +03:00
..
.gitignore release r-45: RuTracker proxy, stop-persistence, strategy cleanup + fixes 2026-06-01 00:30:31 +03:00
go.mod release r-45: RuTracker proxy, stop-persistence, strategy cleanup + fixes 2026-06-01 00:30:31 +03:00
main.go fix: post-review batch (r-55) — QUIC morph, rt-proxy prune, detector guards, webpanel hardening 2026-06-11 00:29:09 +03:00
Makefile release r-45: RuTracker proxy, stop-persistence, strategy cleanup + fixes 2026-06-01 00:30:31 +03:00