pfSense

Image upload validation improvements. Fixes #9804

• Make functions for validating images against a pre-defined list of
  approved types
• Change the picture widget to use these functions
• Add validation for uploaded Captive Portal logo/background images

Create custom CSRF Error page. Implements #9799

• Use formatting consistent with other GUI pages
• Warns the user about potential dangers of submitting form data

Fix oinkmastercode tag in status.php. Fixes #9736

Ticket #9674: Do not check password when using shared key

Clarify that error message is about proxy password

Fix #9719: Fix descriptive name field behavior

Fix spacing of MAC OEM on ARP table

Add search/filter to DHCP/DHCPv6 leases, ARP, and NDP. Implements #9791

Merge pull request #4085 from s-fiebig/master

Redact BandwidthD postgres db password. Fixes #9784

Provide optional "enable" argument to enable/disable form submit button

Removed escaping of CSS classes

Initialize JSON data to avoid warning.

Avoid warning/error for not initialized JSON variable.

Fixed #9785

Fix #9612: Run fsck -z once during upgrade

Fix #9722: Change voucher shortcut to point to voucher status page

Initialize array properly

Redirect to status_captiveportal.php

Update translation files

Regenerate pot

Fix #9756: Fix NCP multiple selection

Fix #3743: Allow OpenVPN keepalive configuration

- Remove hardcoded 'keepalive 10 60' configuration
- Added 'inactive seconds' option
- Let user configure 'keepalive interval timeout'. It defaults to 10 60
as it was hardcoded until now
- Let user define ping and chose between ping-exit or ping-restart...

Setup shortcuts for packages. Fixes #9770

Add GUI option for IPsec tunnel closeaction. Fixes #9767

Remove redundant if

Sanitize barnyard_dbpwd in status.php output. Fixes #9764

Correct input validation for firewall rule VLAN priority/set. Fixes #9763

Add dedicated auth log. Implements #9754

Fix malformed JSON

Fix malformed JSON using json_encode().

Add wizard select_source & use for OpenVPN DH. Fixes #9748

Merge pull request #4082 from ableischwitz/master

Merge pull request #3999 from vpiserchia/master

Merge pull request #4042 from plumbeo/fix-reconfig

Merge pull request #3985 from luckman212/system-general-sr-fix1

Revert "Fix #6195: Allow to change NAT Outbound mode"

This reverts commit bdaa5235d4c3f4e226e4e7ebee55fc7ff5fd4360.

Fix #6195: Allow to change NAT Outbound mode

make_config_revision_entry() second parameter expects a username to
override current logged in user in special cases. It's used when a tool
(e.g. wizard) is used to configure some functionality.

As it was already noted in easyrule.inc, this parameter cannot have...

Fix interface/config alignment on interfaces_ppps_edit.php. Fixes #9741

Filter/manage cleanup for new logs. Issue #9714

• Disable 'manage' for utx & userlog
• Fix filter form labels for utx to match column headers

Log setting/size review. Fixes #9734

• Move default GUI line limit and log size defaults to $g rather than
  hardcoding.
• Set default GUI line limit to 500 (up from 50)
• Set max GUI line limit to 200000 (up from 2000)
• Set default log size to 512000 (500 KiB, previous clog default was 511488)...

Revise regex and redirect on failure

status.php: Sanitize snort/suricata oink and etpro codes.

Fixed #9731
by validating widget key with regex

Incorporate filter_log.inc into syslog.inc. Issue #8350

Now all log-related functions are together.

Code refactoring/simplification. Issue #9714

Fix package log header. Issue #9714

Additional logs & optimizations. Issue #9714

• Add log tabs for nginx, userlog, and some other previously hidden logs
• Start working on output of utx log via list/libxo (work in progress)
• Consolodate function that retrieves log messages to avoid duplicated...

status.php: Sanitize zabbix TLS psk info. Fixes #9729

status.php: Restrict thoth tests to arm64. Fixes NG 2569

status.php: Sanitize influx_pass and cert_key. Fixes #9727 Fixes #9728

Rename status_pkglogs.php to status_logs_packages.php. Issue #9714

Standardize pkg log display. Issue #9714

• Add common log code as needed
• Define options to fine-tune package log display
• Add filtering

Move Package Logs in with rest of logs. Issue #9714

Standardize log tab behavior

Move log-related functions to their own file. Issue #8350

Also add a simple shell program that will dump all log entries for a given
log + all rotated/compressed logs in order.

Log rotation settings. Issue #9711 and Issue #9712

• Add rotation count GUI option and per-log option
• Add settings for packages to override more fields not supported in the
  GUI

Fix log size text in common log settings. Issue #9711

Move log rotation options to their own section. Issue #9711

While here, fix log size description to fit new behavior.

Add log compression type option. Issue #9711

Merge branch 'master' into system-general-sr-fix1

Merge pull request #4079 from johnforte/master

Fix PHP warning

Merge pull request #4084 from Godwottery/master

Merge pull request #4074 from NanoCaiordo/dhcp_show_all

Include system.inc in prefixes.php. Fixes #9715

Change logging to plain text, deprecate clog. Issue #8350

Do not list OpenVPN interfaces as usable by DHCP relay. Fixes #8443

Make NTP minpoll and maxpoll user-configurable. Implements #6787

Use batch mode for top so it displays process list w/o terminal. Fixes #9522

While here, set a high number of processes to display and also remove
the use of 'cut' which limited column length. With current display
method it's unnecessary.

Add auth server name change input validation. Fixes #9692

Allow NAT-T to be set with IKEv2. Fixes #9695

Add kernel memory usage to status.php. Implements #9705

Redact ACB encryption PW. Fixes #9694

Apply the same fix from issue #8469 to DHCPv6. Fixes #9448

User & Group Manager: Improve Deny Config Write Handling. Fixes #9259

• Denies all changes if a user has the Deny Config Write privilege.
  Previously it only denied the config write but some OS operations were
  performed.
• Sets an input error so the user is notified that their attempt failed....

Only prevent deleting IPsec VTI P2 when set to VTI. Fixes #9258

Correct wording of CA/Cert CN input validation. Fixes #9234

Add more color choices for login screen

Fix manual backup flag

Fix is_set/isset

Fixed #8907
Support field size option in select control

Fixed #9693
Allow ACB to be suppressed by including magic string in the backup description
Transmit max number of manual backups in the ACB

Fixed #9687
Remove all referenes to legact/Gold ABC system

Add additional DHCPv6 prefix delegation size options to dropdown list on interface settings.
- implements #9590

Was failing the check if clicking test notifications twice in a row. So it was saving the asterisks and overwriting the current password.

Merge pull request #4029 from BBcan177/patch-1

Fixup format of XMLRPC auth error to match GUI auth error.

Fix copyright message years to reflect BSDP -> ESF -> Netgate

Normalize some copyright messages

Fixed #9245 updating copyright notices

Fixed #9586 by detecting if option list includes /0 or not

Picture widget corrections. Fixes #9610

• Sanitize user input before using as path/filenames
• Use a more accurate method of determining image type on read
• More sanity checks before reading images.

Encode error output in services_captiveportal_mac.php. Fixes #9609

Keep "Show all configured leases" enabled after deleting DHCP leases.

Merge remote-tracking branch 'upstream/master'

Encode hostname in services_acb.php before use. Fixes #9584

Only apply group size restriction to local groups. Implements #3792

Merge pull request #4061 from evantill/master

Fix IPsec forms

JS was hiding inputs, but now that the hidden inputs are global, the entire form was being hidden.

Remove duplicate function

Ticket #3500: Simplify dhcpd_gather_stats.php using system_get_dhcpleases()

Ticket #3500: Simplify diag_arp.php using system_get_dhcpleases()