Franco Fichtner
77458a2f64
openssh: feedback/discussion with @adschellevis for #1347
2017-12-01 11:19:41 +00:00
Ad Schellevis
e3f6e4f7c1
Merge pull request #1969 from fabianfrz/xss_certmanager
...
fix: system_certmanager.php xss
2017-11-30 19:20:55 +01:00
Fabian Franz
2e5e6b07b7
fix: system_certmanager.php xss
2017-11-30 16:45:29 +01:00
Franco Fichtner
8e85edd416
rc: try this AHCI workaround for USB3 and similar instability
...
PR: https://forum.opnsense.org/index.php?topic=6366.0
2017-11-30 15:08:33 +01:00
Ad Schellevis
66c533548f
system_certmanager.php html escape cert info, https://github.com/opnsense/core/issues/1964
2017-11-30 08:27:31 +01:00
Ad Schellevis
f3d8b484d3
Merge pull request #1949 from evbevz/header_advanced
...
Default form: ability to hide header under 'advanced' tag
2017-11-29 18:50:32 +01:00
Franco Fichtner
bdecf7edb2
ui: a bit of OCD, setting the header...
...
should not be tampered with so it's probably better to
move it into the commented CSRF area to raise its importance.
2017-11-29 08:21:34 +01:00
Franco Fichtner
9e209562d9
openssh: work on listen interface selection #1347
2017-11-29 00:04:54 +01:00
Franco Fichtner
045598089d
unbound: disable dnssec-stripped; closes #1962
2017-11-28 20:38:38 +01:00
Ad Schellevis
34a695074a
filter, port alias download uses wrong interpretation of checkaliasesurlcert option, by default it doesn't seem to validate certs. we should definitely change our config details to enable this....
2017-11-28 17:44:09 +01:00
Ad Schellevis
fc7fd2be4c
cleanup, move X-Frame-Options up for clarity
2017-11-28 14:24:22 +01:00
Franco Fichtner
145c7c8f24
system: translate default language indicator
2017-11-28 13:51:26 +01:00
Franco Fichtner
c45a428ef6
ui: nicer header spacing
2017-11-28 13:34:51 +01:00
Ad Schellevis
1219f2f1db
system_certmanager, xss with crafted cert. for https://github.com/opnsense/core/issues/1964
2017-11-28 10:57:01 +01:00
Ad Schellevis
2b94b6691a
another take on tab removal. ( https://github.com/opnsense/core/issues/1928 )
...
The current dev version has two main issues when there are too many sub menu's, this commit aims to smoothen these issues as far as possible.
1) When an item is selected which lies beyond the visible area, the menu looses track of what is selected. This commit forces the selected item to center.
2) Scrolling in a large list hides the top level structure, using this commit the selected path will always stay on top by temporary moving the menu items into another z-index.
because the menu system applies to both legacy as new style code, we need the same construction in both templates. maybe we should at some point move these into functions somewhere in an extrenal js file.
@fichtner for me this fixes the need to bring tabs back into the firewall section.
2017-11-27 21:44:17 +01:00
Ad Schellevis
70b74c29dc
filter, port aliases (url type) fix a type and separate loading before we can change the other aliases.
...
url_ports didn't work, in a first step we're goint to split logic so we can remove the dependency for the other (network) alias types by switching to tables later in combination with a different procedure to actually load the alias contents.
At some point in time we might consider removing the url port types, their not used very often and can't use table types and therefore can't detach creation from loading.
2017-11-26 20:11:06 +01:00
Franco Fichtner
96b97eabfa
firmware: terminate session for all but config read/write for #1954
...
This finally fixes some of the aborted internally errors given by the page.
2017-11-24 08:10:02 +00:00
Franco Fichtner
7ccfe1ba9f
web proxy: synchronous service start, no delay, session closed for #1954
2017-11-24 07:54:39 +00:00
Ad Schellevis
91c8493068
openvpn, forgot to show remote_network for other server modes. for https://github.com/opnsense/core/issues/1932
2017-11-23 21:21:05 +01:00
Ad Schellevis
7338c4f81f
mvc, change default (non api) pages to send X-Frame-Options:SAMEORIGIN, to deny embedding in [i]frames from other locations.
2017-11-23 08:29:13 +01:00
Ad Schellevis
35dd2ea09c
openvpn, remove check for mode in remote_network, remote_networkv6
...
It doesn't seem to make sense to ask for a value and ignore it afterwards, there doesn't appear to be a valid reason to validate here.
For https://github.com/opnsense/core/issues/1932
2017-11-23 06:51:44 +01:00
Franco Fichtner
70f5acad06
ui: service control indicators and button rework; closes #1562
...
While here, use fontawesome icons and make the legacy and MVC
header section match in layout terms.
2017-11-22 11:45:42 +00:00
Franco Fichtner
f228940d97
mvc: small fix and style sweep for dialog titles
2017-11-22 09:45:36 +00:00
Franco Fichtner
821002c560
mvc: breadcrumb titles in all core pages; closes #1948
2017-11-22 09:23:39 +00:00
evbevz
9e7fd65f6e
Default form: ability to hide header under 'advanced' tag
...
(cherry picked from commit 40d0e79277cf886caf2cc181cce392794677c57d)
2017-11-22 11:48:29 +03:00
Franco Fichtner
f6e5e963f1
pkg: easy dhparam target for regeneration
...
Regenerate, while at it...
2017-11-22 09:40:31 +01:00
Franco Fichtner
95215828a7
openvpn: more relocations for private scripts
2017-11-22 08:56:26 +01:00
Franco Fichtner
dc353d4860
openvpn: move internal script file to plugin location
2017-11-22 08:50:54 +01:00
Franco Fichtner
aaf2178f5a
www: merge ticker.js into opnsense_legacy.js
2017-11-22 08:45:49 +01:00
Franco Fichtner
8e9f4db5bc
system: autoupdate firmware privs are not needed since forever
2017-11-22 07:34:46 +00:00
Franco Fichtner
6102d61056
system: additional sanity check, otherwise we kill the system default #1218
2017-11-22 07:28:26 +00:00
Franco Fichtner
543c7b286d
system: add syslog-ng, disable processing so that it coexists with syslogd
2017-11-22 07:13:53 +00:00
Franco Fichtner
d3373a848d
mvc: switch function order for smaller diff against stable/17.7
2017-11-21 17:51:39 +01:00
Franco Fichtner
d021ae1431
firmware: fix typos
2017-11-21 17:17:37 +01:00
Ad Schellevis
2f84c67427
MVC/Menu system, restructure interface collection a bit. less repetition, should be faster as well.
2017-11-21 17:12:20 +01:00
Franco Fichtner
a58dcf7cdf
ui: the neverending tab story #1922
2017-11-21 08:50:54 +00:00
Ad Schellevis
2826d6206e
ui/mvc, make "advanced mode" sticky too, requested https://github.com/opnsense/core/issues/1915
2017-11-21 08:55:25 +01:00
Franco Fichtner
c12b4ab610
menu: flip back, unify naming by adding "v4" suffix
2017-11-21 08:14:41 +01:00
Franco Fichtner
5ce9933f2b
firewall: fix scrub edit cancel link
2017-11-21 05:24:55 +00:00
Franco Fichtner
db785c954f
firewall: fix rules edit cancel menu behaviour #1928
2017-11-21 05:24:01 +00:00
Franco Fichtner
94713036f2
radvd: advertise on virtual IPs
...
PR: https://github.com/opnsense/core/issues/1937
2017-11-20 21:00:26 +00:00
Franco Fichtner
38c1daa965
dhcp: support stateless DHCP
...
* Support stateless RA and update help text
* Allow DHCPv6 to run without a range
PR: https://forum.opnsense.org/index.php?topic=6418.0
2017-11-20 20:24:43 +00:00
Ad Schellevis
38aafc8fa7
IDS, add tls and http logging in eve and alert log viewer.
...
- add options to suricata yaml
- add tls and http options in alert view
- bug: fix issue with grid when interface is missing (crash on replace())
- style: change dialog markup, a bit wider and less padding.
a bit related to https://github.com/opnsense/core/issues/1911
2017-11-20 21:03:03 +01:00
Franco Fichtner
edf4210b6f
menu: kill display_top_tabs(); closes #1928
2017-11-20 17:16:00 +00:00
Franco Fichtner
224579328c
menu: rework wireless status for #1928
2017-11-20 17:14:25 +00:00
Ad Schellevis
581b8b17bc
ipsec, add support for elliptical curve dh groups and change default dhgroup in the process (from 2 -> 24), last but not least some dhgroups seemed to be missing an implementation. for https://github.com/opnsense/core/issues/1942
2017-11-20 13:10:42 +01:00
Ad Schellevis
df4de782b3
insight, reverse lookup acl fix
2017-11-20 08:05:26 +01:00
Franco Fichtner
a3d16f7844
intrusion detection: two issues, closes #1935
2017-11-20 06:19:50 +00:00
Franco Fichtner
39f95f01e9
mvc: style sweep
2017-11-20 05:35:45 +01:00
Franco Fichtner
f48e891ed8
system: fix regression in spaghetti code for #1218
2017-11-20 03:33:06 +00:00
