BSD Commit Log Search

Firewall: Diagnostics - use new rlabel from pfctl, closes https://github.com/opnsense/core/issues/10552

since pftop uses numbers as well, we need to map these to labels too, which means mapping labels to numbers with `pfctl -vvPsr` inside the query_top() function.

menu: move Favorites star on leaf pages (#10710)

Services/Unbound: update hagezi blocklists to use new mirror URLs (#10709)

Update hagezi blocklists to use new mirror URLs

Unbound: switch AAAA-only mode from respip to block_a_wdata

(cherry picked from commit 2ba567788eff6b9a7732fd86401292424fb0a114)

Unbound: switch AAAA-only mode from respip to block_a_wdata

bootgrid: classname can depend on state, accept a callback function

(cherry picked from commit b3112e5630f3d32c2f37b5aefcd07e8dd79d443b)

contrib: add a tool to generate an SPDX formatted software bill of materials (SBOM) using information available in our package database.

Firewall: Log Files: Live View - htmlSafe() action search value

PR: GHSA-9h93-hhcx-957c
(cherry picked from commit 14de8b0235246b83a1824ca9a5f052817fbd035b)

Interfaces: Assignments - strict description fields as before in interfaces_assign.php

Earlier code dropped all unallowed fields in https://github.com/opnsense/core/blob/8cc69b21e0f4c2622fc8a62df2a15ba7cb1e731f/src/www/interfaces_assign.php#L121

PR: GHSA-9h93-hhcx-957c
(cherry picked from commit 7f6811fea620c94d6bd13aaa13ecf5df90d939a0)

ui: add some more legacy_html_escape_form_data() safeguards

PR: GHSA-6vv6-fpw9-8r2g
(cherry picked from commit 096071af4be64380a34f396e1718008247c91dc0)

VPN: OpenVPN: Connection Status - add some input validation for control characters

PR: GHSA-fqmm-g6xw-qhm4
(cherry picked from commit 024d986d43538b5261413f6cf5b815175e9253b1)

mvc: add some missint htmlSafe() calls for generated HTML

PR: GHSA-75fw-j788-j4hj
(cherry picked from commit 5786beb80c5410a170b44ef6f1532ac071e135bd)

Firewall: Log Files: Live View - htmlSafe() action search value

PR: GHSA-9h93-hhcx-957c

Interfaces: Assignments - strict description fields as before in interfaces_assign.php

Earlier code dropped all unallowed fields in https://github.com/opnsense/core/blob/8cc69b21e0f4c2622fc8a62df2a15ba7cb1e731f/src/www/interfaces_assign.php#L121

PR: GHSA-9h93-hhcx-957c

ui: add some more legacy_html_escape_form_data() safeguards

PR: GHSA-6vv6-fpw9-8r2g

VPN: OpenVPN: Connection Status - add some input validation for control characters

PR: GHSA-fqmm-g6xw-qhm4

mvc: add some missint htmlSafe() calls for generated HTML

PR: GHSA-75fw-j788-j4hj

configd/templates: ensure strict templates are not reloaded via * wildcard

(cherry picked from commit a2b31db4a9896f0279ba264c4b78b32f5d059130)

configd/templates: ensure strict templates are not reloaded via * wildcard

pkg: fix plist

plugins: abandoned argument in plugins_services()

mvc: translate grid view labels - closes https://github.com/opnsense/core/pull/10537

(cherry picked from commit 21ccf46ad35f3a7965bfaaef51579f1ae380282b)

Firewall: NAT: Source NAT: scope get action to general settings (#10674)

(cherry picked from commit de14b37faf11e2c712b0f9fd23ebd6d8ac5db498)

Firewall: NAT: Destination NAT - add proper support for container items in search field selection, export and import data, implement this in DNAT ui. closes https://github.com/opnsense/core/issues/10691

(cherry picked from commit 662a2ae2ddaf9d561db7fdc34525b127ee781124)

mvc: fix stale imports in core

(cherry picked from commit 124e64ad1ac001217eaea9e336a7e5039c8fa168)

Firewall: NAT: Source NAT: add staticnatport and endpoint-independent in the grid and add boolean formatter

(cherry picked from commit 09b63a4bf2b4388051b65bfc4b500cb46e6ecb50)

diagnostics/netflow: stop service before reloading configuration (#10658)

(cherry picked from commit 8821d45663012ee79184543c3b35a184c37970c2)

mvc: translate backend system status messages - closes https://github.com/opnsense/core/pull/10579

(cherry picked from commit 2df0ac3478a43a5ef8e2b75584856f87d8001926)

Firewall: NAT: Destination NAT - Add two more volatile fields to export_ignore

(cherry picked from commit ae388c4b6c16a4bce298fc5a0b605fe95f3cb2c4)