143 Commits

Author SHA1 Message Date
Ad Schellevis
5df590cd13 SSH: optional KexAlgorithms, Ciphers and MACs to harden security. closes https://github.com/opnsense/core/issues/3975 2020-03-12 13:47:56 +01:00
Franco Fichtner
6e727e43d2 system: allow an arbitrary group for sudo like ssh login; closes #3407 2019-05-04 10:43:32 +02:00
Franco Fichtner
ba0c82dd54 dhcpd: naming convention, plugins_configure() use 2019-04-29 07:49:26 +02:00
Franco Fichtner
6d66dd81b2 system: avoid short PHP tag 2019-03-04 07:24:31 +01:00
Ad Schellevis
2f919443dc cherry-pick https://github.com/opnsense/core/pull/3234 2019-03-01 18:35:50 +01:00
Ad Schellevis
4a8e737ced fix some gettext() + html_safe, discussed c4c7f8d732 2019-02-03 20:04:08 +01:00
Michael Steenbeek
6db6598c00 Fix more incorrect HTML tags (#3007) 2018-12-04 10:13:22 +01:00
Franco Fichtner
6bbfcf4b02 system: allow USB-based serial ports; closes #2026 2018-07-15 19:47:43 +02:00
Franco Fichtner
8b73ce3072 system: HSTS option tweaks 2018-05-28 05:12:31 +00:00
Ad Schellevis
4e0ce9b193 webgui, opt-in for htst, for https://github.com/opnsense/core/issues/1722 2018-05-27 20:01:40 +02:00
Franco Fichtner
d13da15cb1 system: move password policy settings to local database server edit #1929
A few review spots and regression fixes as well.
2018-05-01 13:44:38 +00:00
Franco Fichtner
c2962ece8b system: cleanups related to #1929 2018-05-01 12:48:01 +00:00
Franco Fichtner
2dd067e313 system: move auth settings to administration settings #1929 2018-05-01 10:19:30 +00:00
Franco Fichtner
5fafceada9 system: tweak working for #1929 2018-04-29 21:16:14 +02:00
Franco Fichtner
ff60fe9cb3 system: add/update valiation for #2340 2018-04-12 22:50:36 +02:00
Franco Fichtner
e9c3be35d6 www: visual cleanups, unused class/style zapping #2290 2018-03-25 13:10:27 +00:00
Franco Fichtner
2caa7fae6a www: missing bits for previous; closes #2175 2018-03-17 16:19:14 +01:00
NOYB
9d96bdcbc7 Help For - Data For Attribute
Use original element (<div>/<small>) with "data-for" attribute.

The old jquery "for" attribute selectors can be removed once conversion to "data-for" attribute is complete (including plugins).

The old jquery selectors to remove once conversion is complete.
  opnsense_ui.js & head.inc
  $("*[for='" + $(this).attr('id') + "']")....
  $('[for*="help_for"]')....
2018-03-17 16:12:55 +01:00
Ad Schellevis
11363e4799 webui, add option to enable access log and fix lighttpd.log in the process. closes https://github.com/opnsense/core/issues/2248 2018-03-09 21:39:45 +01:00
Franco Fichtner
44622dc97a www: "formselect" hasn't been around for a long time 2018-02-04 22:36:51 +01:00
Franco Fichtner
04f8f972fb system: whitespace thingy 2018-02-01 08:26:23 +01:00
Franco Fichtner
4cdfe13bc4 openssh: prevent SFTP login for non-admins...
unless explicity configured.  We set "admins" in the default
config with also adds "wheel" underneath, but some systems may
not use "admins" so that doesn't work then.

PR: https://forum.opnsense.org/index.php?topic=6994.15
2018-01-31 21:19:10 +00:00
NOYB
6ef9a127ff HTML Compliance - Attribute "type" on Element <script>
Warning: The type attribute is unnecessary for JavaScript resources.

HTML5: Edition for Web Authors
http://www.w3.org/TR/2014/REC-html5-20141028/scripting-1.html
The default, which is used if the attribute is absent, is "text/javascript".

The Script element
https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script
HTML5 specification urges authors to omit the attribute rather than provide a redundant MIME type.
2018-01-22 19:13:34 +01:00
Franco Fichtner
73527b8844 web gui: label tweaking, do not mention recovery yet #1347 2018-01-19 08:38:02 +01:00
Franco Fichtner
795dd8bd72 web gui: add a warning dialog for #1347 2018-01-19 08:28:57 +01:00
NOYB
4a7bcae7af HTML Compliance - Attribute "for" on Element <div>
Error: Attribute "for" not allowed on element "div" at this point.
Attributes for element "div": http://www.w3.org/html/wg/drafts/html/master/single-page.html#the-div-element

HTML attribute reference: https://developer.mozilla.org/en-US/docs/Web/HTML/Attributes
The "Output" element: https://developer.mozilla.org/en-US/docs/Web/HTML/Element/output

Attributes for element "output": http://www.w3.org/html/wg/drafts/html/master/single-page.html#the-output-element
2018-01-06 10:52:17 +01:00
NOYB
b2f4cfa7c1 HTML Compliance - Attribute "type" on Element <i>
Error: Attribute "type" not allowed on element <i> at this point.
2018-01-05 08:36:26 +01:00
NOYB
76aab5cb52 HTML Compliance - Obsolete table attributes
width, align, valign, cellpadding, cellspacing, border, summary

Error: The width attribute on the table element is obsolete. Use CSS instead.
Error: The align attribute on the table element is obsolete. Use CSS instead.
Error: The valign attribute on the table element is obsolete. Use CSS instead.
Error: The cellpadding attribute on the table element is obsolete. Use CSS instead.
Error: The cellspacing attribute on the table element is obsolete. Use CSS instead.
Error: The border attribute on the table element is obsolete. Use CSS instead.
Error: The summary attribute on the table element is obsolete. Consider describing the structure of the table in a caption element or in a figure element containing the table; or, simplify the structure of the table so that no description is needed.
2018-01-04 18:26:02 +01:00
Franco Fichtner
71df9cc1cc system: sort ciphers a bit, not perfect but easier to read 2017-12-29 13:23:26 +00:00
Franco Fichtner
19c4253b1c webgui: explain the confirm / recovery
PR: https://github.com/opnsense/core/issues/1347
2017-12-27 18:23:23 +01:00
Franco Fichtner
fa3ad8025a webgui: flip-flop on old and new URL in case something went wrong
The initial timeout of 20 seconds is long, but it's safer to wait so
that we're not bouncing back to the old web GUI before it goes down.

PR: https://github.com/opnsense/core/issues/1347
2017-12-27 17:55:20 +01:00
Franco Fichtner
5db9141a45 power: finally add that reboot wait dialog
And a few more tweaks in the other spots.
2017-12-20 08:14:16 +00:00
Franco Fichtner
0645d11653 webgui: reload stuff part 1 #1347
Reload the client side.  If we can't connect back, the second
part of this rework will make sure that the system reverts to
its former state and this reload will be able to pick it up.

While here kill the questionable login autocomplete toggle.
2017-12-20 07:33:41 +00:00
Franco Fichtner
086b91c04a firewall: move anti-lockout rule to advanced settings #1347 2017-12-16 13:28:58 +00:00
Franco Fichtner
6ab6267087 webgui: move settings around a bit #1347
Anti-lockout really has both SSH and web GUI as its targets,
which is a bit weird here.  Maybe we ought to split the options,
but for now move it a bit close to SSH.  A separate option makes
no sense at this point.  Maybe this is more of an advanced firewall
option?
2017-12-16 09:20:37 +00:00
Franco Fichtner
8839a087f1 system: fix in empty interface selections #1347 2017-12-07 12:44:04 +00:00
Franco Fichtner
d7e8f8a8cd webgui: small fix and reordering #1347 2017-12-01 17:04:13 +00:00
Franco Fichtner
60e4a462c2 webgui: same same but different #1347 2017-12-01 17:52:55 +01:00
Franco Fichtner
77458a2f64 openssh: feedback/discussion with @adschellevis for #1347 2017-12-01 11:19:41 +00:00
Franco Fichtner
9e209562d9 openssh: work on listen interface selection #1347 2017-11-29 00:04:54 +01:00
Franco Fichtner
bc261c67b8 webgui: add and use backend call
PR: https://github.com/opnsense/plugins/issues/236
2017-08-29 10:37:46 +02:00
Ad Schellevis
c14000892b Merge pull request #1766 from opnsense/license_generate
License overview generation for GitHub
2017-08-09 22:49:25 +02:00
Franco Fichtner
db1b20b893 openssh: feedback for #1750
Prodded by: @adschellevis
2017-08-09 14:24:45 +02:00
Franco Fichtner
0692e3ce59 src: more for previous, just restart unconditionally #1750 2017-08-08 17:50:50 +02:00
Franco Fichtner
62ac77d2f6 openssh: a bit more for #1750 2017-08-08 17:30:30 +02:00
Franco Fichtner
cc6444bf7f ssh: fix ssh installer anti-lockout on WAN/LAN-only setups
PR: https://github.com/opnsense/core/issues/1750
2017-08-08 17:16:16 +02:00
Franco Fichtner
c5d4002541 src: add Scott's e-mail everywhere 2017-08-05 20:57:29 +02:00
Franco Fichtner
d87c6ff556 Scripts: add a license generator for GitHub 2017-08-05 20:21:35 +02:00
Ad Schellevis
cb08677593 webgui, refactor rc.php_ini_setup into standard template, rename webuicompression to compression and split help text 2017-05-04 16:12:53 +02:00
Ad Schellevis
d71fbf0df0 webgui, allow use of output compression for dynamic content. in same cases saves approx. 90% of datatransfer to client, at some cpu cost. default Off 2017-05-04 10:48:41 +02:00