Eric Sauvageau
263449f32b
Updated website URL
2019-06-22 01:23:50 -04:00
Eric Sauvageau
9f14d213d0
Updated github README indicating this legacy branch is no longer developed
2018-04-08 19:28:25 -04:00
Eric Sauvageau
520760eb72
Updated documentation
380.70
2018-04-08 13:59:48 -04:00
Eric Sauvageau
95b9ad11bc
Bumped revision to 380.70 final
2018-04-08 13:59:31 -04:00
Eric Sauvageau
c8353dca94
Updated documentation
380.70-beta1
2018-03-31 19:56:20 -04:00
Eric Sauvageau
68c4f8edbc
httpd: security backport in ej_dump() from 380_8228
2018-03-31 19:55:32 -04:00
Eric Sauvageau
eb56d07c8e
Updated documentation
2018-03-26 13:47:46 -04:00
Eric Sauvageau
cdbca37797
Bumped revision to 380.70 beta 1
2018-03-26 13:46:24 -04:00
Vladislav Grishenko
5291995373
httpd: rewrite check_xss_blacklist() to resolve buffer overrun vulnerability, and make it generally cleaner
2018-03-23 23:26:15 -04:00
Eric Sauvageau
bb24181419
webui: fixed FAQ links (backport from 380_8120)
2018-03-20 00:20:11 -04:00
Eric Sauvageau
30551fb9ce
webui: fixed QoS overhead preset list
2018-03-17 12:31:55 -04:00
Eric Sauvageau
a07313053f
entware: fix output redirection when backing up the JFFS partition
2018-03-14 00:16:13 -04:00
Eric Sauvageau
3dd3e4f59a
Updated documentation
2018-03-12 00:59:26 -04:00
Eric Sauvageau
40678dc7c9
bb125: enable ls color by default (to match Asus)
2018-03-12 00:43:02 -04:00
Eric Sauvageau
62b18cf7cc
webui: remove link to non-existing script from temperature monitor page
2018-03-12 00:43:00 -04:00
Eric Sauvageau
c6bca74be4
rc: libdisk: tighten security around some of the system config files found in /etc ; fix potential resource leak if an error occured when creating ovpn passwd/group/shadow files
2018-03-12 00:42:54 -04:00
Eric Sauvageau
18f39488f2
samba: make SMBv2 + SMBv1 the default, and add a SMBv2-only option
2018-03-11 23:54:16 -04:00
Eric Sauvageau
ca28e0f972
rc: miniupnpd: wait 10 secs before restarting miniupnpd on ntp's first sync
2018-03-11 23:48:44 -04:00
Eric Sauvageau
51ef3f520e
rc: move services-start custom script to the very end of start_services()
2018-03-11 23:46:08 -04:00
Eric Sauvageau
283f222891
entware: pointed setup script to new installer urls; synced entware-setup.sh with NG branch
2018-03-11 23:44:44 -04:00
Eric Sauvageau
529096f9df
httpd: check that opendir() succeeded, otherwise httpd would crash
2018-03-11 23:43:10 -04:00
Eric Sauvageau
4ef86659ff
Merge pull request #1595 from RiJo/patch-1
...
Fixed typo in README.proprietary
2018-02-17 00:49:38 -05:00
Rikard Johansson
53fd9a4bce
Fixed typo in README.proprietary
2018-02-15 08:36:06 +01:00
Eric Sauvageau
3fa7ead167
webui: backport ipv4_addr validator method from 384.xx
2018-02-15 01:21:53 -05:00
Eric Sauvageau
c312de866f
doc: "licence" is French, English would be "license".
2018-02-13 11:26:25 -05:00
Eric Sauvageau
17d40dce26
webui: use double quotes around VPN client list to reduce chances of broken JS code
2018-02-13 00:50:06 -05:00
Eric Sauvageau
2f80ac4d36
Bump revision to 380.70 alpha 1
2018-02-13 00:49:52 -05:00
Eric Sauvageau
826dba81b5
Added legal disclaimer regarding proprietary components
2018-02-12 23:06:34 -05:00
Eric Sauvageau
3a849d0178
Updated documentation
2018-02-04 02:29:52 -05:00
Eric Sauvageau
3851431b3e
Updated documentation
380.69_2
2018-01-28 00:59:57 -05:00
Eric Sauvageau
20a1a44fc7
Bumped revision to 380.69_2
2018-01-28 00:59:39 -05:00
Eric Sauvageau
a160108def
httpd: fix buffer overrun in ej_update_variables() (fixes CVE-2018-5721)
2018-01-24 17:56:03 -05:00
Eric Sauvageau
e38bab2662
httpd: backport handle_request() security fixes from 384_10007
2018-01-22 14:29:07 -05:00
Eric Sauvageau
b828c0916f
Updated documentation
2018-01-18 01:01:00 -05:00
Eric Sauvageau
d43f35823c
webui: improve field validation on the OpenVPN client page
2017-12-28 16:23:12 -05:00
Eric Sauvageau
30b0653677
shared: fix buffer overrun in get_parsed_crt() if provided with a key/cert longer than the supported limit ( closes #1569 )
2017-12-28 15:39:46 -05:00
Eric Sauvageau
04cece8ff3
httpd: truncate imported OpenVPN key/certs to 3499 chars max (the supported limit)
2017-12-28 15:33:54 -05:00
Eric Sauvageau
14a7f91298
rc: make the Quantenna watchdog only reboot on three consecutive ping failures rather than three isolated incidents
2017-12-26 14:35:31 -05:00
Eric Sauvageau
012d7c36e0
Merge pull request #1564 from ariesdevil/patch-1
...
webui: Fix error in detecting filename of uploaded keyécerts
2017-12-20 16:36:40 -05:00
ZHAO Yijun
27f32ac140
Fix indexOf error
...
The private key name is `example.com.key` when use Let's Encrypt.
2017-12-19 17:05:08 +08:00
Eric Sauvageau
4a490bf2d0
shared: define the aae_disable_force nvram for all models, since webui has no rc_support flag to rely upon
2017-12-17 22:21:40 -05:00
Eric Sauvageau
71cdd1888e
Merge pull request #1501 from comandrei/iphone-8-x-support
...
networkmap: Add support for iPhone 8, iPhone 8 Plus and iPhone X detection
2017-12-16 01:02:10 -05:00
Eric Sauvageau
22cd640e0f
webui: fix validator regexp for IE11
2017-12-14 23:00:53 -05:00
Eric Sauvageau
f90fc255f3
webui: add missing semicolon ( closes #1559 )
2017-12-14 17:01:15 -05:00
Eric Sauvageau
4cea1ee25f
Bumped revision to 380.69_1
2017-12-13 23:39:43 -05:00
Eric Sauvageau
b7a9467805
Updated documentation
2017-12-11 20:11:26 -05:00
Eric Sauvageau
7f8f03a9b9
Updated documentation
380.69
2017-12-11 17:41:38 -05:00
Eric Sauvageau
dd7a3671d1
Bumped revision to 380.69
2017-12-11 17:38:57 -05:00
Eric Sauvageau
5323501e54
webui: add option to disable Asusnat tunnel/AAE/Mastiff service (backport from 382)
...
Not quite sure what this tunnelling service is for. It's partly
closed source, and eats a fair amount of CPU/RAM. Best guess is,
it's a NAT traversal tunnel used for Asus' AiHome, and maybe
AiCloud and their mobile application?
2017-12-11 17:37:49 -05:00
Eric Sauvageau
63804b6b3f
webui: validator: provide regexp to RegExp() as constructors instead of strings, otherwise the "-" character isn't properly escaped.
...
A string requires double escaping, i.e. "\\-" to work. Using a constructor is more readable and clearly
shows the intent it to escape the dash, not the backslash itself.
2017-12-10 16:51:34 -05:00