Commit Graph

6 Commits

Author SHA1 Message Date
Tony Murray
bc6dda75b7 Fix oxidized (#10706) 2019-10-17 12:05:39 +00:00
brownowski
c4569a620b Allow OS to define config highlighting (pfSense) (#10392)
* Update showconfig.inc.php

Fix display for pfsense config files.

* Update showconfig.inc.php

Change from else if to elseif

* Update showconfig.inc.php

Decode special chars before syntax highlighting.

* Update pfsense.yaml

* Add config_highlighting device property

Add config_highlighting to device definition
Update showconfig.inc.php to use config_highlighting to set language.

* Update showconfig.inc.php

Fix incorrect code. Chose correct variable where config_highlighting is set.

* Update os_schema.json

Add property config_highlighting to schema
 - used for language highlighting when displaying the config file

* Update showconfig.inc.php
2019-09-25 06:42:45 +00:00
Tony Murray
e99f421511 Remove legacy auth usage of $_SESSION (#10491)
* Remove auth use of $_SESSION

Will break plugins that depend on $_SESSION, Weathermap was already fixed.
Port them to use Auth::check()/Auth::user()/Auth:id()

* revert accidental replacement
2019-08-05 14:16:05 -05:00
Tony Murray
3ead462549 Enable CSRF protection (#10447)
* Enable CSRF protection

* fix style issues
2019-07-17 07:20:26 -05:00
Tony Murray
f3ba8947f7 Use Config helper (#10339)
remove usage of global variable
2019-06-23 00:29:12 -05:00
Tony Murray
36431dd296 Security fix: unauthorized access (#10091)
* Security fix: unauthorized access
Affects nginx users:
Moved php files outside of public html directory (Apache was protected by .htaccess)

Affects all users:
Some files did not check for authentication and could disclose some info.
Better checks before including files from user input

* git mv html/includes/ includes/html
git mv html/pages/ includes/html/
2019-04-11 23:26:42 -05:00