[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"project-4799":3},{"id":4,"name":5,"fullName":6,"owner":7,"repo":5,"description":8,"homepage":9,"htmlUrl":10,"language":11,"languages":10,"totalLinesOfCode":10,"stars":12,"forks":13,"watchers":14,"openIssues":15,"contributorsCount":16,"subscribersCount":16,"size":16,"stars1d":17,"stars7d":18,"stars30d":19,"stars90d":16,"forks30d":16,"starsTrendScore":20,"compositeScore":21,"rankGlobal":10,"rankLanguage":10,"license":22,"archived":23,"fork":23,"defaultBranch":24,"hasWiki":25,"hasPages":23,"topics":26,"createdAt":10,"pushedAt":10,"updatedAt":47,"readmeContent":48,"aiSummary":49,"trendingCount":16,"starSnapshotCount":16,"syncStatus":50,"lastSyncTime":51,"discoverSource":52},4799,"SafeLine","chaitin\u002FSafeLine","chaitin","SafeLine is a self-hosted WAF(Web Application Firewall) \u002F reverse proxy to protect your web apps from attacks and exploits.","https:\u002F\u002Fly.safepoint.cloud\u002FfUxS0GW",null,"Go",21495,1406,101,87,0,9,45,227,42,117.44,"GNU General Public License v3.0",false,"main",true,[27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46],"api-gateway","application-security","appsec","blueteam","bruteforce","captcha","cve","cybersecurity","firewall","hackers","http-flood","security","self-hosted","sql-injection","vulnerability","waf","web-application-firewall","web-security","websecurity","xss","2026-06-12 04:00:22","\u003Cp align=\"center\">\n  \u003Cimg src=\"\u002Fimages\u002Fbanner.png\" width=\"400\" \u002F>\n\u003C\u002Fp>\n\n\u003Ch4 align=\"center\">\n  SafeLine - Make your web apps secure\n\u003C\u002Fh4>\n\n\u003Cp align=\"center\">\n  \u003Ca target=\"_blank\" href=\"https:\u002F\u002Fly.safepoint.cloud\u002FlaA8asp\">🏠 Website\u003C\u002Fa>   |  \n  \u003Ca target=\"_blank\" href=\"https:\u002F\u002Fly.safepoint.cloud\u002Fw2AeHhb\">📖 Docs\u003C\u002Fa>   |  \n  \u003Ca target=\"_blank\" href=\"https:\u002F\u002Fly.safepoint.cloud\u002FhSMd4SH\">🔍 Live Demo\u003C\u002Fa>   |  \n  \u003Ca target=\"_blank\" href=\"https:\u002F\u002Fdiscord.gg\u002FSVnZGzHFvn\">🙋‍♂️ Discord\u003C\u002Fa>   |  \n  \u003Ca target=\"_blank\" href=\"\u002FREADME_CN.md\">中文版\u003C\u002Fa>\n\u003C\u002Fp>\n\n## 👋 INTRODUCTION\n\nSafeLine is a self-hosted **`WAF(Web Application Firewall)`** to protect your web apps from attacks and exploits.\n\nA web application firewall helps protect web apps by filtering and monitoring HTTP traffic between a web application and the Internet. It typically protects web apps from attacks such as `SQL injection`, `XSS`, `code injection`, `os command injection`, `CRLF injection`, `ldap injection`, `xpath injection`, `RCE`, `XXE`, `SSRF`, `path traversal`, `backdoor`, `bruteforce`, `http-flood`, `bot abused`, among others.\n\n#### 💡 How It Works\n\n\u003Cimg src=\"\u002Fimages\u002Fhow-it-works.png\" width=\"800\" \u002F>\n\nBy deploying a WAF in front of a web application, a shield is placed between the web application and the Internet. While a proxy server protects a client machine’s identity by using an intermediary, a WAF is a type of reverse-proxy, protecting the server from exposure by having clients pass through the WAF before reaching the server.\n\nA WAF protects your web apps by filtering, monitoring, and blocking any malicious HTTP\u002FS traffic traveling to the web application, and prevents any unauthorized data from leaving the app. It does this by adhering to a set of policies that help determine what traffic is malicious and what traffic is safe. Just as a proxy server acts as an intermediary to protect the identity of a client, a WAF operates in similar fashion but acting as a reverse proxy intermediary that protects the web app server from a potentially malicious client.\n\nits core capabilities include:\n\n- Defenses for web attacks\n- Proactive bot abused defense \n- HTML & JS code encryption\n- IP-based rate limiting\n- Web Access Control List\n\n#### ⚡️ Screenshots\n\n| \u003Cimg src=\".\u002Fimages\u002Fscreenshot-1.png\" width=370 \u002F> | \u003Cimg src=\".\u002Fimages\u002Fscreenshot-2.png\" width=370 \u002F> |\n| ------------------------------------------------- | ------------------------------------------------- | \n| \u003Cimg src=\".\u002Fimages\u002Fscreenshot-3.png\" width=370 \u002F> | \u003Cimg src=\".\u002Fimages\u002Fscreenshot-4.png\" width=370 \u002F> | \n\nGet [Live Demo](https:\u002F\u002Fdemo.waf.chaitin.com:9443\u002F)\n\n## 🔥 FEATURES\n\nList of the main features as follows:\n\n- **`Block Web Attacks`**\n  - It defenses for all of web attacks, such as `SQL injection`, `XSS`, `code injection`, `os command injection`, `CRLF injection`, `XXE`, `SSRF`, `path traversal` and so on.\n- **`Rate Limiting`**\n  - Defend your web apps against `DoS attacks`, `bruteforce attempts`, `traffic surges`, and other types of abuse by throttling traffic that exceeds defined limits.\n- **`Anti-Bot Challenge`**\n  - Anti-Bot challenges to protect your website from `bot attacks`, humen users will be allowed, crawlers and bots will be blocked.\n- **`Authentication Challenge`**\n  - When authentication challenge turned on, visitors need to enter the password, otherwise they will be blocked.\n- **`Dynamic Protection`**\n  - When dynamic protection turned on, html and js codes in your web server will be dynamically encrypted by each time you visit.\n\n#### 🧩 Showcases\n\n|                               | Legitimate User                                     | Malicious User                                                   |\n| ----------------------------- | --------------------------------------------------- | ---------------------------------------------------------------- | \n| **`Block Web Attacks`**       | \u003Cimg src=\".\u002Fimages\u002Fskeleton.png\" width=270 \u002F>       | \u003Cimg src=\".\u002Fimages\u002Fblocked-for-attack-detected.png\" width=270 \u002F> |\n| **`Rate Limiting`**           | \u003Cimg src=\".\u002Fimages\u002Fskeleton.png\" width=270 \u002F>       | \u003Cimg src=\".\u002Fimages\u002Fblocked-for-access-too-fast.png\" width=270 \u002F> |\n| **`Anti-Bot Challenge`**       | \u003Cimg src=\".\u002Fimages\u002Fcaptcha-1.gif\" width=270 \u002F>      | \u003Cimg src=\".\u002Fimages\u002Fcaptcha-2.gif\" width=270 \u002F>                     |\n| **`Auth Challenge`**          | \u003Cimg src=\".\u002Fimages\u002Fauth-1.gif\" width=270 \u002F>         | \u003Cimg src=\".\u002Fimages\u002Fauth-2.gif\" width=270 \u002F>                        |\n| **`HTML Dynamic Protection`** | \u003Cimg src=\".\u002Fimages\u002Fdynamic-html-1.png\" width=270 \u002F> | \u003Cimg src=\".\u002Fimages\u002Fdynamic-html-2.png\" width=270 \u002F>              |\n| **`JS Dynamic Protection`**   | \u003Cimg src=\".\u002Fimages\u002Fdynamic-js-1.png\" width=270 \u002F>   | \u003Cimg src=\".\u002Fimages\u002Fdynamic-js-2.png\" width=270 \u002F>                | \n\n## 🚀 Quickstart\n\n> [!WARNING]\n> 中国大陆用户安装国际版可能会导致无法连接云服务，请查看 [中文版安装文档](https:\u002F\u002Fdocs.waf-ce.chaitin.cn\u002Fzh\u002F%E4%B8%8A%E6%89%8B%E6%8C%87%E5%8D%97\u002F%E5%AE%89%E8%A3%85%E9%9B%B7%E6%B1%A0)\n\n#### 📦 Installing\n\nInformation on how to install SafeLine can be found in the [Install Guide](https:\u002F\u002Fdocs.waf.chaitin.com\u002Fen\u002FGetStarted\u002FDeploy)\n\n#### ⚙️ Protecting Web Apps\n\nto see [Configuration](https:\u002F\u002Fdocs.waf.chaitin.com\u002Fen\u002FGetStarted\u002FAddApplication)\n\n## 📋 More Informations\n\n#### Effect Evaluation\n\n| Metric            | ModSecurity, Level 1 | CloudFlare, Free     | SafeLine, Balance      | SafeLine, Strict      |\n| ----------------- | -------------------- | -------------------- | ---------------------- | --------------------- |\n| Total Samples     | 33669                | 33669                | 33669                  | 33669                 |\n| **Detection**     | 69.74%               | 10.70%               | 71.65%                 | **76.17%**            |\n| **False Positive**| 17.58%               | 0.07%                | **0.07%**              | 0.22%                 |\n| **Accuracy**      | 82.20%               | 98.40%               | **99.45%**             | 99.38%                |\n\n\n#### Is SafeLine Production-Ready?\n\nYes, SafeLine is production-ready.\n\n- Over 180,000 installations worldwide\n- Protecting over 1,000,000 Websites\n- Handling over 30,000,000,000 HTTP Requests Daily\n\n#### 🙋‍♂️ Community\n\nJoin our [Discord](https:\u002F\u002Fdiscord.gg\u002FSVnZGzHFvn) to get community support, the core team members are identified by the STAFF role in Discord.\n\n- channel [#feedback](https:\u002F\u002Fdiscord.com\u002Fchannels\u002F1243085666485534830\u002F1243120292822253598): for new features discussion.\n- channel [#FAQ](https:\u002F\u002Fdiscord.com\u002Fchannels\u002F1243085666485534830\u002F1263761679619981413): for FAQ.\n- channel [#general](https:\u002F\u002Fdiscord.com\u002Fchannels\u002F1243085666485534830\u002F1243115843919806486): for any other questions.\n\nSeveral contact options exist for our community, the primary one being Discord. These are in addition to GitHub issues for creating a new issue.\n\n\u003Cp align=\"left\">\n  \u003Ca target=\"_blank\" href=\"https:\u002F\u002Fdiscord.gg\u002FSVnZGzHFvn\">\u003Cimg src=\"https:\u002F\u002Fimg.shields.io\u002Fbadge\u002FDiscord-5865F2?style=flat&logo=discord&logoColor=white\">\u003C\u002Fa>  \n  \u003Ca target=\"_blank\" href=\"https:\u002F\u002Fx.com\u002Fsafeline_waf\">\u003Cimg src=\"https:\u002F\u002Fimg.shields.io\u002Fbadge\u002FX.com-000000?style=flat&logo=x&logoColor=white\">\u003C\u002Fa>  \n  \u003Ca target=\"_blank\" href=\"\u002Fimages\u002Fwechat.png\">\u003Cimg src=\"https:\u002F\u002Fimg.shields.io\u002Fbadge\u002FWeChat-07C160?style=flat&logo=wechat&logoColor=white\">\u003C\u002Fa>\n\u003C\u002Fp>\n\n#### 💪 PRO Edition\n\nComing soon!\n\n#### 📝 License\n\nSee [LICENSE](\u002FLICENSE.md) for details.\n","SafeLine 是一个自托管的 Web 应用防火墙 (WAF) 和反向代理，用于保护您的 Web 应用免受攻击和漏洞利用。其核心功能包括防御 SQL 注入、XSS、代码注入等常见 Web 攻击，主动抵御恶意机器人滥用，提供 HTML 和 JS 代码加密，基于 IP 的速率限制以及 Web 访问控制列表。SafeLine 通过过滤、监控并阻止任何恶意 HTTP\u002FS 流量来保护 Web 应用，并防止未经授权的数据离开应用。它适用于需要增强 Web 安全性的场景，如企业网站、在线服务和 API 网关等。",2,"2026-06-11 03:00:30","top_language"]