Skip to content

v0.5.0

Choose a tag to compare

@github-actions github-actions released this 28 Feb 04:02
· 219 commits to main since this release

v0.5.0

Highlights (EN)

  • New: built-in localhost-only Web Management Interface at http://127.0.0.1:3333/ for provider management, global settings, status, and service control.
  • New: configuration export for easy backup/migration.
  • Security hardening for local UI: loopback-only + localhost Host enforcement (DNS rebinding mitigation), state-changing requests require X-Clipal-UI: 1 + JSON, request bodies capped at 1 MiB, and API keys are masked in the UI.
  • Hot reload improvements: config.yaml is now watched and applied (log level, failover knobs, notifications) without a restart in most cases.
  • UI/UX: redesigned management pages with improved system status display, accessibility, and responsive tabs/modals.

亮点 (中文)

  • 新增:内置 Web 管理界面(仅本机访问),打开 http://127.0.0.1:3333/ 即可管理 Provider、全局配置、系统状态和服务控制。
  • 新增:支持导出全量配置(便于备份/迁移)。
  • 本地 UI 安全加固:仅允许 loopback 访问 + 限制 Host 为 localhost(缓解 DNS rebinding),所有修改类请求必须带 X-Clipal-UI: 1 且使用 JSON,请求体限制为 1 MiB,界面中不会明文展示 API Key。
  • 热重载增强:现在也会监听并应用 config.yaml(日志级别、failover 参数、通知配置等)多数情况下无需重启。
  • 体验改进:管理界面整体重构,系统状态展示更清晰,提升可访问性与移动端/窄屏适配(tabs/modals)。