VLESS Reverse Proxy: Forbid reverse-proxy UUID using forward-proxy, enabled by default

RPRX · web-flow · commit a83253f3d7a4 · 2025-11-23T04:23:48.000Z
https://t.me/projectXtls/1070 #5101 (comment)
diff --git a/proxy/vless/inbound/inbound.go b/proxy/vless/inbound/inbound.go
@@ -538,6 +538,10 @@ func (h *Handler) Process(ctx context.Context, network net.Network, connection s
 
 	account := request.User.Account.(*vless.MemoryAccount)
 
+	if account.Reverse != nil && request.Command != protocol.RequestCommandRvs {
+		return errors.New("for safety reasons, user " + account.ID.String() + " is not allowed to use forward proxy")
+	}
+
 	responseAddons := &encoding.Addons{
 		// Flow: requestAddons.Flow,
 	}

Original file line number	Diff line number	Diff line change
`@@ -538,6 +538,10 @@ func (h *Handler) Process(ctx context.Context, network net.Network, connection s`
`538`	`538`
`539`	`539`	`account := request.User.Account.(*vless.MemoryAccount)`
`540`	`540`
	`541`	`+ if account.Reverse != nil && request.Command != protocol.RequestCommandRvs {`
	`542`	`+ return errors.New("for safety reasons, user " + account.ID.String() + " is not allowed to use forward proxy")`
	`543`	`+ }`
	`544`	`+`
`541`	`545`	`responseAddons := &encoding.Addons{`
`542`	`546`	`// Flow: requestAddons.Flow,`
`543`	`547`	`}`