pfSense

Fix core dump on viewing invalid package log

Remove . and / from pkg name to avoid directory traversal

Remove id=0 from miniupnpd menu and shortcut

Avoid directory traversal when reading package xml files, also check if file exists before try to read it

Make sure variables are escaped, also replace exec calls to run rm by unlink_if_exists()

Remove useless code, variable is set again on next line

Escape parameters passed to shell_exec()

Be more careful with host parameter and make sure it's escaped when call shell functions

Validate starttime and stoptime format

Make the byte counts on OpenVPN status human readable rather than huge unformatted numbers.

Replace Header() calls by lowercase

Merge pull request #1229 from ExolonDX/branch-master_06

Merge pull request #1228 from ExolonDX/branch_master_05

Bring the code of captiveportal up to speed with its module counterpart requirments

Fix #3665, show IPSec tunnel description on status page

Fix a typo on variable name

Fix td class

remove extra .

Be more precise to match members of a bridge interface, it should fix #3637

Do not allow interface group name to be bigger than 15 chars, helps ticket #3208

Add some protection to parameters that come through _GET

Tidy up misc. widgets XHTML

captive_portal_status.widget.php
Remove NAME from TABLE tag, not valid in XHTML

carp_status.widget.php
Add missing closing TD tag

dyn_dns_status.widget.php and
installed_packages.widgete.php
Update TD class to single line

load_balancer_status.widget.php...

Update "pkg_edit.,php"

"custom_php_after_head_command", if the PHP code also contains
JavaScript ("squid_auth.xml" for example) then this will cause HTML
errors, as you are not supposed to have anything between the closing
HEAD tag and the opening BODY tag....

Whitespace fixes

Allow the user to select "None" for OpenVPN client certificate, so long as they supply and auth user/pass. Ticket #3633

Just use ID here instead.

Various fixes to diag_dump_states.php (Add interface column, some extra validation safety, etc). Should fix #2121

Update csrf-magic to 1.0.4

Merge pull request #1226 from ExolonDX/branch_master_04

Merge pull request #1225 from ExolonDX/branch_master_03

Merge pull request #1224 from ExolonDX/branch_master_02

Tidy up "status_queues.php" XHTML

Add closing BODY and closing HTML tags if "traffic shaping is not
configured."

Tidy up "status_openvpn.php" XHTML

Move the closing FORM tag after the PHP check if there are any OpenVPN
instances.

Tidy up "diag_dns.php" XHTML

Move the "=" sign into the first table cell, this allows the output to
line up in the second cell,
Tidy up the table from the "resolution time" output.

Tidy up "crash_reporter.php" XHTML

Tidy up Paragraph tags
Close INPUT tags

Merge pull request #1219 from nagyrobi/patch-13

Fix filename

remove openbgpd bits from system_gateways_edit and system.inc. The package
match is case-sensitive and hasn't matched the openbgpd package's name in
at least 5 years, so it doesn't do anything. It's far from functional in
any useful manner even fixing that issue.

Drop a note on the page about how to repair a failed mirror.

Bring in proper gmirror support for the GUI and notifications.
Made a general gmirror library to perform various gmirror tasks and get information, using some of the former widget logic to start. Updated widget to use this new code.
Added a Diag > GEOM Mirrors page that displays information about existing mirrors and perform various management tasks. Current actions include rebuilding a drive, forgetting disconnected mirror drives, insert/remove, deactivate/activate, clearing medatada. It's now possible to use the GUI to rebuild a failed mirror by performing a forget, then insert action to replace a missing/dead drive....

Merge pull request #1220 from ExolonDX/branch_master_01

Tidy up "diag_tables.php" XHTML

Add BODY tag
Add ACTION to FORM tag
Add CDATA section to SCRIPTS
Remove NAME from OPTION tag, not valid in XHTML
Update HTML Boolean operators
Add SUMMARY to TABLE
Close IMG tag and add ALT
Move closing Anchor tag into PHP staement...

Unset iflist and iflist_disabled

Update services_ntpd.php

Add validation for the case of no server specified, fall back to pool.ntp.org

Show disabled interface when it was already part of interface group, it avoids to show a random interface instead and let user to add it by mistake. It should fix #3680

Merge pull request #1217 from nagyrobi/patch-15

Merge pull request #1212 from ExolonDX/branch_master_04

Merge pull request #1211 from ExolonDX/branch_master_03

Merge pull request #1210 from ExolonDX/branch_master_02

Merge pull request #1209 from ExolonDX/branch_master_01

Update services_ntpd_gps.php

Fixed MRC->RMC typos in sentence types, display and fine-tuning for SureGPS card.

Use script-friendly gmirror status output to build this info, old method was breaking output when the mirror was being rebuilt.

Make logging of pass rules opt-in rather than opt-out

Split the setting of logging pass and block into 2 separate settings. Maybe this can be extended to control even the user rules?

Trim whitespaces from options text and fix #3674

Tidy up "system_firware" XHTML

Remove WRAP from TEXTAREA and add Javascript to add wrap hard

Tidy up Ampersand XHTML

Deprecate Ampersand in Anchor tags

Tidy up misc. XHTML

Close FORM tag correctly
Add missing TD and TR tags
Move NOWRAP into CLASS statement

Tidy up "system_usermanager.php" XHTML

Add CLOSEHEAD varialbe and manually close HEAD
Add CDATA sections to SCRIPTS
Deprecate Ampersand in Anchor tags
Remove NAME from TR tag, not valid in XHTML
Remove WRAP from TEXTAREA and Javascript to take wrap off

Add (self) for an outbound NAT source as well

Let (self) be used on port forward destinations also

Add (self) keyword for specifying "any IP address on this firewall" as a rule choice.

Fix typo

Clarify usage for not/and/or in host field

Add some rudimentary and/or logic to the host field of packet capture.

Allow for negation of protocol, host, or port number when capturing packets.

Merge pull request #1154 from ExolonDX/branch_master_01

Merge pull request #1149 from phil-davis/patch-7

Merge pull request #1205 from ExolonDX/branch_master_59

Merge pull request #1204 from ExolonDX/branch_master_58

Merge pull request #1203 from ExolonDX/branch_master_56

Merge pull request #1202 from ExolonDX/branch_master_54

Merge pull request #1201 from ExolonDX/branch_master_53

Merge pull request #1200 from ExolonDX/branch_master_52

Merge pull request #1199 from ExolonDX/branch_master_51

Merge pull request #1198 from ExolonDX/branch_master_50

Merge pull request #1196 from ExolonDX/branch_master_46

Merge pull request #1195 from ExolonDX/branch_master_45

Merge pull request #1194 from ExolonDX/branch_master_44

Merge pull request #1193 from ExolonDX/branch_master_43

Merge pull request #1192 from ExolonDX/branch_master_42

Merge pull request #1191 from ExolonDX/branch_master_41

Merge pull request #1190 from ExolonDX/branch_master_40

Merge pull request #1189 from ExolonDX/branch_master_39

Merge pull request #1188 from ExolonDX/branch_master_38

Merge pull request #1187 from ExolonDX/branch_master_37

Merge pull request #1186 from ExolonDX/branch_master_36

Merge pull request #1185 from ExolonDX/branch_master_34

Merge pull request #1183 from ExolonDX/branch_master_32

Merge pull request #1180 from ExolonDX/branch_master_29

Merge pull request #1178 from ExolonDX/branch_master_26

Merge pull request #1177 from ExolonDX/branch_master_25

Merge pull request #1176 from ExolonDX/branch_master_24

Merge pull request #1175 from ExolonDX/branch_master_23

Merge pull request #1173 from ExolonDX/branch_master_21

Merge pull request #1172 from ExolonDX/branch_master_20

Merge pull request #1171 from ExolonDX/branch_master_19

Merge pull request #1170 from ExolonDX/branch_master_18

Merge pull request #1169 from ExolonDX/branch_master_17

Merge pull request #1168 from ExolonDX/branch_master_16