BSD Commit Log Search

Interfaces: Assignments - add interface configuration settings in new assignments page. for https://github.com/opnsense/core/issues/10568

work in progress

Firewall: Alias: Use same dynamic label as in KEA DHCPv6 for a unified look

Services: Kea DHCPv6: use DOM construction for the 'dynamic' label

firewall: fix loopback address in private defintions; closes #10694

Services: Kea DHCPv4/v6: Remove count badge from GroupBy with static configuration elements, since its unlikely to change and its distracting

Services: Dnsmasq DNS & DHCP: Remove count badge from GroupBy with static configuration elements, since its unlikely to change and its distracting

mvc: fix tab-of-death

mvc: PortField: add test for normalizedPort() and annotate problem

firewall: remove 2a10::/12 from bogonsv6.sample since it was de-bogonized in 2020 (#10617)

Spent some time troubleshooting why incoming traffic was being blocked by
the bogon rules after upgrade of OPNsense, and found that the system was
using the list from bogonsv6.sample which contains entries that are no longer
bogons.

2a10::/12 started being used for real network in 2020:

https://www.ripe.net/about-us/news/de-bogonising-2a10-12/

Check all items are numeric before apply range to dnat automatic firewall rule (#10712)

* Check all items are numeric before apply range to dnat automatic firewall rule

* Resolve well known ports to allow dnat ranges to target them

* Normalize all dnat ports in pf filters

* Use ->getValue() in PortField::normalizedPort

* Apply suggestion from @AdSchellevis

---------

Co-authored-by: Ad Schellevis <AdSchellevis at users.noreply.github.com>

menu: fix Favorites star rendering

firewall: add missing TLS ports to well-known ports (#10672) (#10672)

Firewall: Diagnostics - use new rlabel from pfctl, closes https://github.com/opnsense/core/issues/10552

since pftop uses numbers as well, we need to map these to labels too, which means mapping labels to numbers with `pfctl -vvPsr` inside the query_top() function.

menu: move Favorites star on leaf pages (#10710)

Services/Unbound: update hagezi blocklists to use new mirror URLs (#10709)

Update hagezi blocklists to use new mirror URLs

Unbound: switch AAAA-only mode from respip to block_a_wdata

(cherry picked from commit 2ba567788eff6b9a7732fd86401292424fb0a114)

Unbound: switch AAAA-only mode from respip to block_a_wdata

bootgrid: classname can depend on state, accept a callback function

(cherry picked from commit b3112e5630f3d32c2f37b5aefcd07e8dd79d443b)

contrib: add a tool to generate an SPDX formatted software bill of materials (SBOM) using information available in our package database.

Firewall: Log Files: Live View - htmlSafe() action search value

PR: GHSA-9h93-hhcx-957c
(cherry picked from commit 14de8b0235246b83a1824ca9a5f052817fbd035b)

Interfaces: Assignments - strict description fields as before in interfaces_assign.php

Earlier code dropped all unallowed fields in https://github.com/opnsense/core/blob/8cc69b21e0f4c2622fc8a62df2a15ba7cb1e731f/src/www/interfaces_assign.php#L121

PR: GHSA-9h93-hhcx-957c
(cherry picked from commit 7f6811fea620c94d6bd13aaa13ecf5df90d939a0)

ui: add some more legacy_html_escape_form_data() safeguards

PR: GHSA-6vv6-fpw9-8r2g
(cherry picked from commit 096071af4be64380a34f396e1718008247c91dc0)

VPN: OpenVPN: Connection Status - add some input validation for control characters

PR: GHSA-fqmm-g6xw-qhm4
(cherry picked from commit 024d986d43538b5261413f6cf5b815175e9253b1)

mvc: add some missint htmlSafe() calls for generated HTML

PR: GHSA-75fw-j788-j4hj
(cherry picked from commit 5786beb80c5410a170b44ef6f1532ac071e135bd)

Firewall: Log Files: Live View - htmlSafe() action search value

PR: GHSA-9h93-hhcx-957c

Interfaces: Assignments - strict description fields as before in interfaces_assign.php

Earlier code dropped all unallowed fields in https://github.com/opnsense/core/blob/8cc69b21e0f4c2622fc8a62df2a15ba7cb1e731f/src/www/interfaces_assign.php#L121

PR: GHSA-9h93-hhcx-957c

ui: add some more legacy_html_escape_form_data() safeguards

PR: GHSA-6vv6-fpw9-8r2g

VPN: OpenVPN: Connection Status - add some input validation for control characters

PR: GHSA-fqmm-g6xw-qhm4

mvc: add some missint htmlSafe() calls for generated HTML

PR: GHSA-75fw-j788-j4hj