Bug #9747
closedIPsec widget - Missing escape of domain backslash
100%
Description
The IPSec widget does not work as soon as one user, e.g., from a windows domain with a username like "domain\user" has logged in via IPSec. In this case the widget information just never renders the information on all three tabs, because an exception is thrown in JS. The problem is the non valid usage of a backslash in the username respectively the missing escaping.
The problem is introduced in https://github.com/pfsense/pfsense/blob/v2.4.4_3/src/usr/local/www/widgets/widgets/ipsec.widget.php#L167 and leads to an error with JSON.parse(s) here https://github.com/pfsense/pfsense/blob/v2.4.4_3/src/usr/local/www/widgets/widgets/ipsec.widget.php#L311
I'm going to create a small pull request, that just fixes the backslash escaping at server side. I'm not a PHP expert, so there may be a better solution.