Telegram-Market/telegram-shop
1
1
Fork 0
Code Issues 45 Pull Requests 1 Actions Packages Projects 1 Releases Wiki Activity

v1.2.0: disable CSRF for Tor, fix wallet type validation, add version history modal

Browse Source 
- fix(admin/csrf): completely disable CSRF checks for Tor/onion compatibility
- fix(validators): add 'main' and 'bonus' to WALLET_TYPES for purchase flow
- feat(admin): add clickable version tag with version history modal in sidebar
- docs: add VERSION.md with changelog and update instructions
This commit is contained in:
NW
2026-07-08 21:59:16 +01:00
parent 4997ca75ab
commit 83991f098b
4 changed files with 87 additions and 44 deletions
Download Patch File Download Diff File Expand all files Collapse all files

51
src/admin/views/partials/app-sidebar.ejs
View File

@@ -24,15 +24,62 @@
</nav>
<div class="nav-footer">
<div class="d-flex align-items-center gap-2">
<div class="d-flex align-items-center gap-2" role="button" data-bs-toggle="modal" data-bs-target="#versionModal" style="cursor:pointer;" title="View version history">
<svg class="sa-icon sa-thin">
<use href="/icons/sprite.svg#tag"></use>
</svg>
<span class="fs-xs opacity-70">v1.0</span>
<span class="fs-xs opacity-70">v1.2.0</span>
</div>
</div>
</aside>
<!-- Version History Modal -->
<div class="modal fade" id="versionModal" tabindex="-1" aria-labelledby="versionModalLabel" aria-hidden="true">
<div class="modal-dialog modal-dialog-scrollable">
<div class="modal-content">
<div class="modal-header">
<h5 class="modal-title" id="versionModalLabel">Version History</h5>
<button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button>
</div>
<div class="modal-body">
<div class="alert alert-info mb-3">
<strong>Current:</strong> v1.2.0 &middot; 2026-07-08
</div>
<h6 class="fw-bold mb-2">v1.2.0 <span class="text-muted fs-sm">&mdash; 2026-07-08</span></h6>
<ul class="small mb-3">
<li><span class="badge bg-warning text-dark">fix</span> Disabled CSRF checks in admin panel for Tor / onion zone compatibility</li>
<li><span class="badge bg-warning text-dark">fix</span> Fixed "Invalid wallet type" error in Telegram bot purchase flow</li>
<li><span class="badge bg-primary">feat</span> Added version history modal in admin sidebar</li>
</ul>
<h6 class="fw-bold mb-2">v1.1.0 <span class="text-muted fs-sm">&mdash; 2026-07-02</span></h6>
<ul class="small mb-3">
<li><span class="badge bg-primary">feat</span> Mercuryo gateway, crypto QR deposit, mono products, wallet auto-refresh</li>
<li><span class="badge bg-warning text-dark">fix</span> CSRF cookie sameSite=false for Tor, auth cookie fix, async handlers</li>
<li><span class="badge bg-primary">feat</span> Draggable dashboard panels + business KPI redesign</li>
<li><span class="badge bg-primary">feat</span> SmartAdmin template redesign + security hardening</li>
</ul>
<h6 class="fw-bold mb-2">v1.0.0 <span class="text-muted fs-sm">&mdash; 2026-06-24</span></h6>
<ul class="small mb-0">
<li><span class="badge bg-primary">feat</span> Initial release — Telegram shop bot with admin panel</li>
<li><span class="badge bg-primary">feat</span> Crypto wallets (BTC, LTC, ETH, USDT, USDC)</li>
<li><span class="badge bg-primary">feat</span> Product catalog with locations, categories, subcategories</li>
<li><span class="badge bg-primary">feat</span> Purchase system with hidden content delivery</li>
<li><span class="badge bg-primary">feat</span> Admin panel with dashboard, wallets, users, purchases, audit log</li>
<li><span class="badge bg-primary">feat</span> Tor proxy support (.onion access)</li>
<li><span class="badge bg-primary">feat</span> i18n localization (en/es/de)</li>
</ul>
</div>
<div class="modal-footer">
<span class="text-muted small">Update version in <code>VERSION.md</code> + <code>app-sidebar.ejs</code></span>
<button type="button" class="btn btn-secondary" data-bs-dismiss="modal">Close</button>
</div>
</div>
</div>
</div>
<div class="backdrop" data-action="toggle-swap" data-toggleclass="app-mobile-menu-open"></div>