pfSense

Removed escaping of CSS classes

(cherry picked from commit c8954c9f0957264a0287d3591b44fab5d52d0998)

Initialize JSON data to avoid warning.

Avoid warning/error for not initialized JSON variable.

(cherry picked from commit 6f2192d44689066e55cb7af6d19323edfc188b91)

Fix malformed JSON

Fix malformed JSON using json_encode().

(cherry picked from commit a9941bf65f82bd0a5491c693a55bc2163a43676d)

Image upload validation improvements. Fixes #9804

• Make functions for validating images against a pre-defined list of
  approved types
• Change the picture widget to use these functions
• Add validation for uploaded Captive Portal logo/background images

(cherry picked from commit 09d597434c9ccb456c8f207649dbe43fd5ff85db)

Fixed #9731
by validating widget key with regex

(cherry picked from commit 42839d824d51cad3a8a55fccb2dc96368568ce8e)

Picture widget corrections. Fixes #9610

• Sanitize user input before using as path/filenames
• Use a more accurate method of determining image type on read
• More sanity checks before reading images.

(cherry picked from commit 2c544ac61ce98f716d50b8e5961d7dfba66804b5)

Ensure NTP values are treated as numbers before use. Fixes #9558

(cherry picked from commit c92dbfc189ee4cc66726d817f47e5473f8ffe147)

Add GUI components for MDS mitigation. Implements #9532

While here, add option to disable PTI display in sysinfo widget.
Implements #9323

(cherry picked from commit 42c48efe1c326273079ac38176098a1993f8ae88)

Update copyright notices to 2019. Happy New Year

(cherry picked from commit 0b4c14a491664053aad3cc76e1ffd67b70ff2da1)

Encode descr in the WOL widget. Fixes #9507

(cherry picked from commit 5789a02eab9b2ebbcb1f28d1d037b408b436a853)