7812 Commits

Author SHA1 Message Date
Franco Fichtner
7e4bcda618 system: routing configure backend call for #1774 2017-12-06 06:28:30 +00:00
Franco Fichtner
4e26bd4462 pkg: fix plist 2017-12-05 23:01:48 +01:00
Ad Schellevis
5e1ba7d5fe firewall, aliases. larger blob of work for https://github.com/opnsense/core/issues/1971
This commit fits our new alias code in place, replacing the old parts as far as possible.
*	filter_legacy.inc is added temporary to isolate some functions that should leave before 18.1 and have a relation to aliases
*	The old cron jobs are removed in favour of a new hourly job to our new update_tables
*	The new configd call is "filter refresh_aliases" which triggers the same update_tables as the hourly one
*	All host/network type aliases are replaced with table tags in filter.inc
2017-12-05 20:59:06 +01:00
Franco Fichtner
6dd94d1c3b pkg: also annotate PHP 7.1 usage here 2017-12-05 07:11:54 +01:00
Ad Schellevis
0df71d2608 firewall, alias. remove dependency of filter_expand_alias_array for https://github.com/opnsense/core/issues/1971 2017-12-04 22:25:48 +01:00
Ad Schellevis
9024f18cbd firewall, aliases. more work on https://github.com/opnsense/core/issues/1971 move port alias parsing out of the way and simplify. the rest of the alias types will be handled by the new python code. 2017-12-04 22:21:00 +01:00
Ad Schellevis
e51197e54b firewall / aliases, fix url parsing in new update. write alias contents while parsing (for traceability) 2017-12-04 21:55:34 +01:00
Ad Schellevis
c30704d101 firewall / alias, work in progress for https://github.com/opnsense/core/issues/1971 missed a check if the alias filename was already there. 2017-12-04 08:44:07 +01:00
Franco Fichtner
b2b61e83cf pkg: also make py27-ipaddress explicit 2017-12-04 06:58:15 +01:00
Franco Fichtner
6bdb68178e mvc: style sweep 2017-12-04 06:56:18 +01:00
Ad Schellevis
3503c16312 firewall, alias. work in progress https://github.com/opnsense/core/issues/1971 2017-12-03 20:18:34 +01:00
Ad Schellevis
b01a45ab63 core, add dependency for https://github.com/opnsense/core/issues/1971 2017-12-03 18:03:47 +01:00
Ad Schellevis
97a1065cfd
Merge pull request #1972 from fabianfrz/fix_localstorage_error
fix the localStorage issue from #1915
2017-12-03 13:37:30 +01:00
Fabian Franz
497d5fe0a4 remove function for checking for sessionStorage 2017-12-02 19:35:28 +01:00
Fabian Franz
062bdb294d remove function for checking for sessionStorage 2017-12-02 19:32:47 +01:00
Fabian Franz
b2f0465cec add the fix to the other files too 2017-12-02 19:21:14 +01:00
Fabian Franz
28b6dff793 fix the localStorage issue from #1915 2017-12-02 18:35:25 +01:00
Franco Fichtner
5b20a3d015 pkg: fix plist 2017-12-02 15:08:09 +01:00
Ad Schellevis
a932093086 firewall / alias, work in progress https://github.com/opnsense/core/issues/1971 2017-12-02 09:59:44 +01:00
Franco Fichtner
d7e8f8a8cd webgui: small fix and reordering #1347 2017-12-01 17:04:13 +00:00
Franco Fichtner
60e4a462c2 webgui: same same but different #1347 2017-12-01 17:52:55 +01:00
Franco Fichtner
4f710837d4 pkg: fix plist 2017-12-01 15:41:02 +01:00
Ad Schellevis
7d815541bc filter / alias, wrap geoip download into separate package for further integration into new alias system 2017-12-01 15:34:01 +01:00
Franco Fichtner
656003ef92 openssh: this was meant to be superseded by the previous #1347 2017-12-01 11:25:45 +00:00
Franco Fichtner
77458a2f64 openssh: feedback/discussion with @adschellevis for #1347 2017-12-01 11:19:41 +00:00
Ad Schellevis
e3f6e4f7c1
Merge pull request #1969 from fabianfrz/xss_certmanager
fix: system_certmanager.php xss
2017-11-30 19:20:55 +01:00
Fabian Franz
2e5e6b07b7 fix: system_certmanager.php xss 2017-11-30 16:45:29 +01:00
Franco Fichtner
8e85edd416 rc: try this AHCI workaround for USB3 and similar instability
PR: https://forum.opnsense.org/index.php?topic=6366.0
2017-11-30 15:08:33 +01:00
Ad Schellevis
66c533548f system_certmanager.php html escape cert info, https://github.com/opnsense/core/issues/1964 2017-11-30 08:27:31 +01:00
Ad Schellevis
f3d8b484d3
Merge pull request #1949 from evbevz/header_advanced
Default form: ability to hide header under 'advanced' tag
2017-11-29 18:50:32 +01:00
Franco Fichtner
bdecf7edb2 ui: a bit of OCD, setting the header...
should not be tampered with so it's probably better to
move it into the commented CSRF area to raise its importance.
2017-11-29 08:21:34 +01:00
Franco Fichtner
9e209562d9 openssh: work on listen interface selection #1347 2017-11-29 00:04:54 +01:00
Franco Fichtner
045598089d unbound: disable dnssec-stripped; closes #1962 2017-11-28 20:38:38 +01:00
Ad Schellevis
34a695074a filter, port alias download uses wrong interpretation of checkaliasesurlcert option, by default it doesn't seem to validate certs. we should definitely change our config details to enable this.... 2017-11-28 17:44:09 +01:00
Ad Schellevis
fc7fd2be4c cleanup, move X-Frame-Options up for clarity 2017-11-28 14:24:22 +01:00
Franco Fichtner
145c7c8f24 system: translate default language indicator 2017-11-28 13:51:26 +01:00
Franco Fichtner
c45a428ef6 ui: nicer header spacing 2017-11-28 13:34:51 +01:00
Ad Schellevis
1219f2f1db system_certmanager, xss with crafted cert. for https://github.com/opnsense/core/issues/1964 2017-11-28 10:57:01 +01:00
Ad Schellevis
2b94b6691a another take on tab removal. (https://github.com/opnsense/core/issues/1928)
The current dev version has two main issues when there are too many sub menu's, this commit aims to smoothen these issues as far as possible.

1) When an item is selected which lies beyond the visible area, the menu looses track of what is selected. This commit forces the selected item to center.
2) Scrolling in a large list hides the top level structure, using this commit the selected path will always stay on top by temporary moving the menu items into another z-index.

because the menu system applies to both legacy as new style code, we need the same construction in both templates. maybe we should at some point move these into functions somewhere in an extrenal js file.

@fichtner for me this fixes the need to bring tabs back into the firewall section.
2017-11-27 21:44:17 +01:00
Ad Schellevis
70b74c29dc filter, port aliases (url type) fix a type and separate loading before we can change the other aliases.
url_ports didn't work, in a first step we're goint to split logic so we can remove the dependency for the other (network) alias types by switching to tables later in combination with a different procedure to actually load the alias contents.
At some point in time we might consider removing the url port types, their not used very often and can't use table types and therefore can't detach creation from loading.
2017-11-26 20:11:06 +01:00
Franco Fichtner
96b97eabfa firmware: terminate session for all but config read/write for #1954
This finally fixes some of the aborted internally errors given by the page.
2017-11-24 08:10:02 +00:00
Franco Fichtner
7ccfe1ba9f web proxy: synchronous service start, no delay, session closed for #1954 2017-11-24 07:54:39 +00:00
Ad Schellevis
91c8493068 openvpn, forgot to show remote_network for other server modes. for https://github.com/opnsense/core/issues/1932 2017-11-23 21:21:05 +01:00
Ad Schellevis
7338c4f81f mvc, change default (non api) pages to send X-Frame-Options:SAMEORIGIN, to deny embedding in [i]frames from other locations. 2017-11-23 08:29:13 +01:00
Ad Schellevis
35dd2ea09c openvpn, remove check for mode in remote_network, remote_networkv6
It doesn't seem to make sense to ask for a value and ignore it afterwards, there doesn't appear to be a valid reason to validate here.
For https://github.com/opnsense/core/issues/1932
2017-11-23 06:51:44 +01:00
Franco Fichtner
70f5acad06 ui: service control indicators and button rework; closes #1562
While here, use fontawesome icons and make the legacy and MVC
header section match in layout terms.
2017-11-22 11:45:42 +00:00
Franco Fichtner
f228940d97 mvc: small fix and style sweep for dialog titles 2017-11-22 09:45:36 +00:00
Franco Fichtner
821002c560 mvc: breadcrumb titles in all core pages; closes #1948 2017-11-22 09:23:39 +00:00
evbevz
9e7fd65f6e Default form: ability to hide header under 'advanced' tag
(cherry picked from commit 40d0e79277cf886caf2cc181cce392794677c57d)
2017-11-22 11:48:29 +03:00
Franco Fichtner
f6e5e963f1 pkg: easy dhparam target for regeneration
Regenerate, while at it...
2017-11-22 09:40:31 +01:00