2715 Commits

Author SHA1 Message Date
NOYB
6ef9a127ff HTML Compliance - Attribute "type" on Element <script>
Warning: The type attribute is unnecessary for JavaScript resources.

HTML5: Edition for Web Authors
http://www.w3.org/TR/2014/REC-html5-20141028/scripting-1.html
The default, which is used if the attribute is absent, is "text/javascript".

The Script element
https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script
HTML5 specification urges authors to omit the attribute rather than provide a redundant MIME type.
2018-01-22 19:13:34 +01:00
NOYB
f509437f84 HTML Compliance - Attribute "content" value on Element <meta>
Error: A meta element with an http-equiv attribute whose value is X-UA-Compatible must have a content attribute with the value IE=edge.

The "Chrome=1" value was used to spawn Chrome Frame in IE 6,7,8,9.  However, "Google Chrome Frame was discontinued in January 2014", and think all IE<11 is beyond EOL.
So is this even needed/useful?

If needed/useful it would probably be better to support deployment by HTTP headers method instead.

Google Chrome Frame
https://en.wikipedia.org/wiki/Google_Chrome_Frame
2018-01-20 13:54:58 +01:00
Franco Fichtner
947718b44b firewall: fix booting alias resolve for #2102
While here, also honour ssl_no_verify and plug in force
usage in the right spot (currently unused but still).
2018-01-18 09:52:00 +01:00
Franco Fichtner
c371155455 rc: since configctl prints "OK" we need a sensible preamble 2018-01-17 11:24:10 +01:00
Franco Fichtner
3869385096 rc: defer newwanip not exectued during boot
PR: https://forum.opnsense.org/index.php?topic=6891.0
2018-01-16 20:10:01 +01:00
Franco Fichtner
cd5e23360f rc: show argument for defer, order was wrong
PR: https://forum.opnsense.org/index.php?topic=6891.0
2018-01-16 17:58:49 +01:00
Franco Fichtner
585d251ae7 rc: annotate reason in the code, too 2018-01-15 22:01:47 +01:00
Franco Fichtner
d26c77a1ea rc: same fix for /tmp MFS
If users want read-only media they need to put their own
/etc/fstab entries into the system as the MFS options from
the config should not work under unknown conditions.
2018-01-15 21:59:59 +01:00
Franco Fichtner
653651046f firewall: move alias directory to persistent memory
PR: https://forum.opnsense.org/index.php?topic=6843.0
2018-01-15 18:44:07 +01:00
Franco Fichtner
39a22b7066 rc: we are stuck with these workarounds forever 2018-01-15 18:05:21 +01:00
Franco Fichtner
817d10955d rc: recover php.ini files just in case 2018-01-15 17:04:35 +00:00
Franco Fichtner
eaffc0edc4 rc: prevent /var MFS transition on install media after import 2018-01-15 17:30:59 +01:00
Franco Fichtner
56517b529a rc: remove 32 bit mmap allow workaround
The final 18.1 kernel will have the default switched for clarity.
2018-01-15 15:19:38 +01:00
Franco Fichtner
85ac021e56 rc: no, we need another mode for the full restore 2018-01-15 11:08:33 +01:00
Franco Fichtner
66d7e80dd1 rc: even more so, restore a non-existent root account 2018-01-15 11:02:16 +01:00
Franco Fichtner
7bbfc26329 rc: make password reset more consistent in `-h 0' mode
We want to be able to access the root account again after all.
2018-01-15 10:58:13 +01:00
Franco Fichtner
5783d102a7 high availability: remove mocked version string 2018-01-14 15:50:59 +01:00
Franco Fichtner
edbcdd0ffe rc: annotate boot ignore, there is probably a race
PR: https://forum.opnsense.org/index.php?topic=6843.0
2018-01-14 09:54:59 +01:00
Franco Fichtner
c43ef0963a rc: use literal * in shell invoke 2018-01-13 15:18:57 +01:00
Franco Fichtner
b4e47b42f9 plugins: no need for $config if not used 2018-01-13 15:15:21 +01:00
Franco Fichtner
ed8ec2d92d rc: switch a few things around, related to previous 2018-01-13 15:05:16 +01:00
Franco Fichtner
27fe55f07e rc: mv VPN init up a bit so that filter is reloaded
PR: https://forum.opnsense.org/index.php?topic=6843.0
2018-01-13 14:45:37 +01:00
Franco Fichtner
cd32032b33 firewall: fix a typo 2018-01-13 11:25:41 +01:00
Franco Fichtner
d215ab49e1 openvpn: follow-up on deprecated warning
PR: https://forum.opnsense.org/index.php?topic=6843.0
2018-01-13 10:43:19 +01:00
Franco Fichtner
0ec330d762 openvpn: revert a change and fix deprecated option
PR: https://forum.opnsense.org/index.php?topic=6843.0
PR: https://github.com/opnsense/core/issues/1996
2018-01-12 20:17:58 +01:00
Franco Fichtner
607bec1626 rc: /var/run cleanup again, kill all but directories 2018-01-12 19:15:23 +01:00
Ad Schellevis
c49d9ddc25 Firewall, add md5 hash to generated rules for easier tracking, to easier solve issues with broken configs like https://github.com/opnsense/core/issues/2075
*	optionally show md5 hash in rules page
*	generate md5 hash when flushing rules
*	make sure rules without interface are rendered in the floating section, so they don't get lost.

Eventually the md5 hashes should be replaced with uuid's, like the other mvc code blocks use.
2018-01-12 09:41:58 +01:00
Franco Fichtner
90d8ef6cf2 rc: add workaround for rspamd clashing with 32 bit mmap disallow
PR: https://github.com/opnsense/plugins/issues/466
2018-01-12 08:11:11 +00:00
Franco Fichtner
eadebf784f rc: only zap files in /var/run 2018-01-12 06:53:30 +00:00
Franco Fichtner
ceedb10bbf dhcp: priv-sep for prefix update closes #2079 2018-01-11 08:23:23 +01:00
Franco Fichtner
5e560ac622 system: mail remote logging
PR: https://github.com/opnsense/plugins/issues/366
2018-01-11 00:09:42 +01:00
Franco Fichtner
018bea397a dhcp: second half of @marjohn56's changes; closes #2077 2018-01-10 18:48:57 +01:00
Franco Fichtner
c62f01f993 dhcp: address issue found by @marjohn56
PR: https://github.com/opnsense/core/pull/2077
2018-01-10 18:22:36 +01:00
Franco Fichtner
e6dc3265fe interfaces: wait for completion of dhcp6c termination 2018-01-09 11:14:22 +00:00
Franco Fichtner
f98e08d16a services: fix indent, also for #1993 2018-01-09 07:22:42 +00:00
Franco Fichtner
c2162b046e interfaces: align interface write loosely related to #1993 2018-01-09 07:10:39 +00:00
Franco Fichtner
930fb801f1 openssh: make not permitting root login explicit; closes #2069 2018-01-08 23:08:03 +01:00
Franco Fichtner
52b32de0ef rc: add argument to avoid spurious syslog reloads
PR: https://github.com/opnsense/plugins/issues/475
2018-01-08 21:20:06 +00:00
Franco Fichtner
d7fb4d13fb src: restore DUID if found 2018-01-08 08:39:40 +01:00
Franco Fichtner
d0cb477281 rc: mount /boot in live mode to make opnsense package update possible 2018-01-08 07:38:53 +01:00
David Harrigan
ce2b6111c1 Add in net.link.bridge.pfil_local_phys.
closes #1894

-=david=-
2018-01-07 11:44:54 +01:00
Ad Schellevis
736cf38924 Firewall/VIP, add gateway option for pppoe interfaces, for https://github.com/opnsense/core/issues/2060 2018-01-05 17:25:57 +01:00
Franco Fichtner
48b164a1a6 system: fix previous, also #1930 2018-01-03 21:21:59 +00:00
Franco Fichtner
6382cbe319 firmware: reload syslog, closes #1930
The syslog reload is kind of graceful so let's try the
cleanest approach before reengineering the world.
2018-01-03 22:11:15 +01:00
Franco Fichtner
3109b519e5 src: regenerate dhparam files 2018-01-02 10:51:17 +01:00
Ad Schellevis
1955d26b80 Firewall/Nat missing localhost and vpn networks for default outbound rules, https://github.com/opnsense/core/issues/1326 2018-01-01 20:07:34 +01:00
Ad Schellevis
dd589009f4 Firewall/rule parsing, move plugin init code to it's own function, for easier reuse. 2018-01-01 11:48:05 +01:00
Franco Fichtner
b5f0902407 interfaces: tweak previous
It boils down to trigger during specific requests or don't.
2017-12-31 13:59:58 +01:00
marjohn56
d36f0f4f62 dhcp6c - Use Reasons
Use the REASONS given by dhcp6c when it calls its script. This then only calls newipv6 when 'REQUEST' is the reason.

RENEW, REBIND or INFO do not have changes to the leases, therefore no call to update is needed and this prevents reloading which can affect VPNs, Unbound etc.

On RELEASE or EXIT, once again newipv6 is called as the lease addresses should have been removed by dhcp6c.
2017-12-31 13:47:35 +01:00
Franco Fichtner
ba725881f8 interfaces: simplify previous 2017-12-31 12:26:55 +01:00