5092 Commits

Author SHA1 Message Date
Eric Sauvageau
263449f32b Updated website URL 2019-06-22 01:23:50 -04:00
Eric Sauvageau
9f14d213d0 Updated github README indicating this legacy branch is no longer developed 2018-04-08 19:28:25 -04:00
Eric Sauvageau
520760eb72 Updated documentation 380.70 2018-04-08 13:59:48 -04:00
Eric Sauvageau
95b9ad11bc Bumped revision to 380.70 final 2018-04-08 13:59:31 -04:00
Eric Sauvageau
c8353dca94 Updated documentation 380.70-beta1 2018-03-31 19:56:20 -04:00
Eric Sauvageau
68c4f8edbc httpd: security backport in ej_dump() from 380_8228 2018-03-31 19:55:32 -04:00
Eric Sauvageau
eb56d07c8e Updated documentation 2018-03-26 13:47:46 -04:00
Eric Sauvageau
cdbca37797 Bumped revision to 380.70 beta 1 2018-03-26 13:46:24 -04:00
Vladislav Grishenko
5291995373 httpd: rewrite check_xss_blacklist() to resolve buffer overrun vulnerability, and make it generally cleaner 2018-03-23 23:26:15 -04:00
Eric Sauvageau
bb24181419 webui: fixed FAQ links (backport from 380_8120) 2018-03-20 00:20:11 -04:00
Eric Sauvageau
30551fb9ce webui: fixed QoS overhead preset list 2018-03-17 12:31:55 -04:00
Eric Sauvageau
a07313053f entware: fix output redirection when backing up the JFFS partition 2018-03-14 00:16:13 -04:00
Eric Sauvageau
3dd3e4f59a Updated documentation 2018-03-12 00:59:26 -04:00
Eric Sauvageau
40678dc7c9 bb125: enable ls color by default (to match Asus) 2018-03-12 00:43:02 -04:00
Eric Sauvageau
62b18cf7cc webui: remove link to non-existing script from temperature monitor page 2018-03-12 00:43:00 -04:00
Eric Sauvageau
c6bca74be4 rc: libdisk: tighten security around some of the system config files found in /etc ; fix potential resource leak if an error occured when creating ovpn passwd/group/shadow files 2018-03-12 00:42:54 -04:00
Eric Sauvageau
18f39488f2 samba: make SMBv2 + SMBv1 the default, and add a SMBv2-only option 2018-03-11 23:54:16 -04:00
Eric Sauvageau
ca28e0f972 rc: miniupnpd: wait 10 secs before restarting miniupnpd on ntp's first sync 2018-03-11 23:48:44 -04:00
Eric Sauvageau
51ef3f520e rc: move services-start custom script to the very end of start_services() 2018-03-11 23:46:08 -04:00
Eric Sauvageau
283f222891 entware: pointed setup script to new installer urls; synced entware-setup.sh with NG branch 2018-03-11 23:44:44 -04:00
Eric Sauvageau
529096f9df httpd: check that opendir() succeeded, otherwise httpd would crash 2018-03-11 23:43:10 -04:00
Eric Sauvageau
4ef86659ff Merge pull request #1595 from RiJo/patch-1
Fixed typo in README.proprietary
2018-02-17 00:49:38 -05:00
Rikard Johansson
53fd9a4bce Fixed typo in README.proprietary 2018-02-15 08:36:06 +01:00
Eric Sauvageau
3fa7ead167 webui: backport ipv4_addr validator method from 384.xx 2018-02-15 01:21:53 -05:00
Eric Sauvageau
c312de866f doc: "licence" is French, English would be "license". 2018-02-13 11:26:25 -05:00
Eric Sauvageau
17d40dce26 webui: use double quotes around VPN client list to reduce chances of broken JS code 2018-02-13 00:50:06 -05:00
Eric Sauvageau
2f80ac4d36 Bump revision to 380.70 alpha 1 2018-02-13 00:49:52 -05:00
Eric Sauvageau
826dba81b5 Added legal disclaimer regarding proprietary components 2018-02-12 23:06:34 -05:00
Eric Sauvageau
3a849d0178 Updated documentation 2018-02-04 02:29:52 -05:00
Eric Sauvageau
3851431b3e Updated documentation 380.69_2 2018-01-28 00:59:57 -05:00
Eric Sauvageau
20a1a44fc7 Bumped revision to 380.69_2 2018-01-28 00:59:39 -05:00
Eric Sauvageau
a160108def httpd: fix buffer overrun in ej_update_variables() (fixes CVE-2018-5721) 2018-01-24 17:56:03 -05:00
Eric Sauvageau
e38bab2662 httpd: backport handle_request() security fixes from 384_10007 2018-01-22 14:29:07 -05:00
Eric Sauvageau
b828c0916f Updated documentation 2018-01-18 01:01:00 -05:00
Eric Sauvageau
d43f35823c webui: improve field validation on the OpenVPN client page 2017-12-28 16:23:12 -05:00
Eric Sauvageau
30b0653677 shared: fix buffer overrun in get_parsed_crt() if provided with a key/cert longer than the supported limit (closes #1569) 2017-12-28 15:39:46 -05:00
Eric Sauvageau
04cece8ff3 httpd: truncate imported OpenVPN key/certs to 3499 chars max (the supported limit) 2017-12-28 15:33:54 -05:00
Eric Sauvageau
14a7f91298 rc: make the Quantenna watchdog only reboot on three consecutive ping failures rather than three isolated incidents 2017-12-26 14:35:31 -05:00
Eric Sauvageau
012d7c36e0 Merge pull request #1564 from ariesdevil/patch-1
webui: Fix error in detecting filename of uploaded keyécerts
2017-12-20 16:36:40 -05:00
ZHAO Yijun
27f32ac140 Fix indexOf error
The private key name is `example.com.key` when use Let's Encrypt.
2017-12-19 17:05:08 +08:00
Eric Sauvageau
4a490bf2d0 shared: define the aae_disable_force nvram for all models, since webui has no rc_support flag to rely upon 2017-12-17 22:21:40 -05:00
Eric Sauvageau
71cdd1888e Merge pull request #1501 from comandrei/iphone-8-x-support
networkmap: Add support for iPhone 8, iPhone 8 Plus and iPhone X detection
2017-12-16 01:02:10 -05:00
Eric Sauvageau
22cd640e0f webui: fix validator regexp for IE11 2017-12-14 23:00:53 -05:00
Eric Sauvageau
f90fc255f3 webui: add missing semicolon (closes #1559) 2017-12-14 17:01:15 -05:00
Eric Sauvageau
4cea1ee25f Bumped revision to 380.69_1 2017-12-13 23:39:43 -05:00
Eric Sauvageau
b7a9467805 Updated documentation 2017-12-11 20:11:26 -05:00
Eric Sauvageau
7f8f03a9b9 Updated documentation 380.69 2017-12-11 17:41:38 -05:00
Eric Sauvageau
dd7a3671d1 Bumped revision to 380.69 2017-12-11 17:38:57 -05:00
Eric Sauvageau
5323501e54 webui: add option to disable Asusnat tunnel/AAE/Mastiff service (backport from 382)
Not quite sure what this tunnelling service is for.  It's partly
closed source, and eats a fair amount of CPU/RAM.  Best guess is,
it's a NAT traversal tunnel used for Asus' AiHome, and maybe
AiCloud and their mobile application?
2017-12-11 17:37:49 -05:00
Eric Sauvageau
63804b6b3f webui: validator: provide regexp to RegExp() as constructors instead of strings, otherwise the "-" character isn't properly escaped.
A string requires double escaping, i.e. "\\-" to work.  Using a constructor is more readable and clearly
shows the intent it to escape the dash, not the backslash itself.
2017-12-10 16:51:34 -05:00