Bug #10945

Alias popup not displaying contents

Added by Jim Pingle 6 months ago. Updated 6 months ago.

Aliases / Tables
Target version:
Start date:
Due date:
% Done:


Estimated time:
Affected Version:
Affected Architecture:
Release Notes:


On firewall rules when hovering over an alias, the info popup only displays the header "Alias details" and no contents. Inspecting the element in the browser shows the contents are in the HTML, but are not being rendered.

This is on a current snapshot. I have another VM on a snapshot from the 17th and it is OK, so something in the last two weeks (Bootstrap changes?)

2020-10-01_11-30.png (19.8 KB) 2020-10-01_11-30.png Jim Pingle, 10/01/2020 10:32 AM
Screenshot 2020-10-02 at 16.02.22.png (249 KB) Screenshot 2020-10-02 at 16.02.22.png Danilo Zrenjanin, 10/02/2020 09:03 AM
Screenshot 2020-10-02 at 16.04.25.png (241 KB) Screenshot 2020-10-02 at 16.04.25.png Danilo Zrenjanin, 10/02/2020 09:04 AM

Associated revisions

Revision 72f4fb2c (diff)
Added by Steve Beaver 6 months ago

Fixed #10945
By adding the HTML elements used in pfSense popovers to the default sanitizer whitelist


#1 Updated by Viktor Gurov 6 months ago

same issue with gateway_info_popup()
and on Firewall NAT pages too

#2 Updated by Steve Beaver 6 months ago

The issue is caused by changes in Bootstrap 3.4.1 which disable HTML in popovers. In theory, this should turn off the sanitizer:

    sanitize: false,

but it does not work as expected. Researching other options.

#3 Updated by Steve Beaver 6 months ago

Specifically adding table elements to the sanitizer's list of allowed content is effective:

// Bootstrap 3.4.1+ sanitizes the contents of popovers even when data-html is specified
// Add table tags to the list of elements permitted by the sanitizer

var defaultWhiteList = $.fn.tooltip.Constructor.DEFAULTS.whiteList

defaultWhiteList.table = []
defaultWhiteList.thead = [] = [] = ["style"]
defaultWhiteList.tbody = [] = ["style"]

#4 Updated by Steve Beaver 6 months ago

  • Status changed from New to Feedback

#5 Updated by Steve Beaver 6 months ago

  • % Done changed from 0 to 100

#6 Updated by Danilo Zrenjanin 6 months ago

Tested the patch on the:

2.5.0-DEVELOPMENT (amd64)
built on Fri Oct 02 06:54:02 EDT 2020

It looks fine now. Ticket resloved.

#7 Updated by Jim Pingle 6 months ago

  • Status changed from Resolved to In Progress

Aliases are working OK for me but Gateway popovers are empty still.

#8 Updated by Steve Beaver 6 months ago

The gateway popup issue is not related to this one. See

#9 Updated by Steve Beaver 6 months ago

  • Status changed from In Progress to Resolved

Also available in: Atom PDF