Jamie Cameron
25f15ce10e
Merge branch 'master' of github.com:webmin/webmin
webmin.dev: webmin/webmin / build (push) Has been cancelled
2026-04-22 08:29:59 -07:00
Ilia Ross
cc9c51c42f
Fix potential stored XSS
2026-04-22 13:59:42 +02:00
Jamie Cameron
6a61d50078
Fix label to reflect reality
...
https://github.com/webmin/webmin/issues/2661
2026-04-21 21:51:37 -07:00
Ilia Ross
948f5bfd77
Fix to make MML files editable
...
webmin.dev: webmin/webmin / build (push) Has been cancelled
https://github.com/webmin/webmin/issues/2671
2026-04-21 21:16:55 +02:00
Ilia Ross
73fadd13c8
Fix to decode Outlook winmail.dat with Convert::TNEF safely
...
webmin.dev: webmin/webmin / build (push) Has been cancelled
* Note: Replace external tnef/opentnef shelling with Convert::TNEF for
application/ms-tnef attachments.
For root-run Webmin mailbox parsing, decode TNEF as the mailbox owner
instead of root by carrying open_user on mail objects and switching to
that user for the parser temp-file work.
https://github.com/webmin/usermin/issues/132
2026-04-20 19:42:22 +02:00
Ilia Ross
d567b09d24
Fix to handle Certbot standalone port conflicts
...
webmin.dev: webmin/webmin / build (push) Has been cancelled
* Note: Add Certbot port-80 warnings and shared runtime checks, while respecting pre-request hooks that may free the port before standalone validation runs.
https://github.com/webmin/webmin/issues/2669#issuecomment-4274711184
2026-04-19 02:00:21 +02:00
Ilia Ross
12069d87af
Fix to redirect to SSL edit page with Let's Encrypt tab
...
webmin.dev: webmin/webmin / build (push) Has been cancelled
544703c1b8 (r182819336)
2026-04-19 00:11:17 +02:00
Ilia Ross
6c211e721c
Update translations
2026-04-18 19:50:53 +02:00
Ilia Ross
bb39d752a9
Update description text and UX
2026-04-18 19:50:26 +02:00
Ilia Ross
ae35b100c2
Update tiny ACME client
2026-04-18 19:35:27 +02:00
Ilia Ross
84c50bba95
Update translations
2026-04-18 19:35:09 +02:00
Ilia Ross
544703c1b8
Add custom ACME server support to Webmin SSL renewal
...
* Note: Adds support for custom ACME directory URLs in Webmin’s SSL certificate flow, including optional EAB credentials, renewal persistence, and compatibility fixes for saved validation modes.
https://github.com/webmin/webmin/issues/2669
2026-04-18 19:34:03 +02:00
Ilia Ross
44c7b36160
Fix saved LE validation mode handling
...
https://github.com/webmin/webmin/issues/2669
2026-04-18 14:59:51 +02:00
Ilia Ross
6639768aa4
Update comments in repo setup
webmin.dev: webmin/webmin / build (push) Has been cancelled
2026-04-17 17:34:34 +02:00
Ilia Ross
39a4b9454d
Fix to improve temporary file handling in repo setup
2026-04-17 17:31:25 +02:00
Ilia Ross
9d6b7bc939
Fix to handle sources list cleanup more safely in repo setup
...
https://github.com/webmin/webmin/issues/2277#issuecomment-4230377785
2026-04-17 15:53:34 +02:00
Ilia Ross
4f3e993ae6
Merge swelljoe/nftables as new nftables module
...
Import https://github.com/swelljoe/nftables into the Webmin tree under nftables/ while preserving upstream history.
2026-04-17 15:19:20 +02:00
Ilia Ross
632232fff0
Update .gitignore
...
webmin.dev: webmin/webmin / build (push) Has been cancelled
[no-build]
2026-04-17 14:43:06 +02:00
Ilia Ross
4d680b1ea9
Fix SHA512/yescrypt error messages to reflect crypt() support
...
https://github.com/webmin/webmin/issues/2656
2026-04-17 14:36:27 +02:00
Jamie Cameron
f03140314e
Merge branch 'master' of github.com:webmin/webmin
webmin.dev: webmin/webmin / build (push) Has been cancelled
2026-04-16 20:02:02 -07:00
Jamie Cameron
6c77b24da6
The crypt function can natively support SHA512
...
https://github.com/webmin/webmin/issues/2656
2026-04-16 20:01:55 -07:00
Ilia Ross
a293fff996
Fix to default TOTP QR generation to QRCode::Encoder
...
webmin.dev: webmin/webmin / build (push) Has been cancelled
Webmin now uses the bundled QRCode::Encoder implementation by default to generate TOTP QR codes locally and inline, without relying on qr.cgi or external services.
This encoder requires Perl 5.24 or newer, so qrencode is no longer included as a recommended package dependency. On older systems where the bundled encoder cannot run, admins can still install qrencode manually to restore QR generation support.
Systems old enough to lack Perl 5.24 are typically already well past their supported security lifecycle, so keeping qrencode preinstalled by default is no longer treated as a packaging requirement. When neither option is available, Webmin falls back cleanly to manual TOTP setup using the shared secret.
https://github.com/webmin/webmin/issues/2667#issuecomment-4247431279
[no-build]
2026-04-16 23:08:00 +02:00
Ilia Ross
da18a16c84
Fix to require 2FA for RPC basic auth
...
webmin.dev: webmin/webmin / build (push) Has been cancelled
+ improve remote auth errors
2026-04-15 22:36:40 +02:00
Jamie Cameron
0424a98a9b
Fall back to uisng df if disk space cannot be computed from the zpool
...
webmin.dev: webmin/webmin / build (push) Has been cancelled
https://github.com/webmin/webmin/issues/2653
2026-04-14 19:55:13 -07:00
Jamie Cameron
ba336c297b
Make check for 'X-SSL-Client-Verify' header stricter
2026-04-14 16:19:22 -07:00
Jamie Cameron
7183af2fdd
Compute used and used percent for ZFS
...
https://github.com/webmin/webmin/issues/2653
2026-04-14 16:16:54 -07:00
Jamie Cameron
02dd602d07
Merge branch 'master' of github.com:webmin/webmin
2026-04-14 16:09:26 -07:00
Jamie Cameron
59fae69c6b
Missing return statement
2026-04-14 16:09:20 -07:00
Ilia Ross
3bd85ab407
Add multi-statement SQL script support when executing inline script
...
https://forum.virtualmin.com/t/edit-databases-sql-query-box-strange-behavior/136988
[no-build]
2026-04-14 23:02:15 +02:00
Ilia Ross
87d8969efb
Fix to gate forwarded proxy URL for consistency
...
webmin.dev: webmin/webmin / build (push) Has been cancelled
https://github.com/webmin/webmin/pull/2666#issuecomment-4241962133
2026-04-14 14:44:57 +02:00
Ilia Ross
97774b829d
Fix to trust forwarded URL headers if proxy headers are trusted
...
webmin.dev: webmin/webmin / build (push) Has been cancelled
https://github.com/webmin/webmin/pull/2666
2026-04-13 15:55:31 +02:00
Ilia Ross
33e03595cf
Merge pull request #2666 from swelljoe/proxy-friendly-get_webmin_browser_url
...
Make get_webmin_browser_url proxy-aware
2026-04-13 15:31:08 +02:00
Jamie Cameron
4b79787fb2
Direct links to xterm do not need to be supported
webmin.dev: webmin/webmin / build (push) Has been cancelled
2026-04-12 13:01:23 -07:00
Ilia Ross
bd7e91c712
Fix comment shift ; add missing comments
webmin.dev: webmin/webmin / build (push) Has been cancelled
2026-04-12 19:03:12 +02:00
Ilia Ross
67950afe3a
Add configurable redaction for logged request parameters
2026-04-12 19:01:14 +02:00
Ilia Ross
a6156ff76b
Add configurable websocket origin exceptions (for weird cases)
2026-04-12 18:35:21 +02:00
Ilia Ross
6de6529bba
Fix to harden session cookie defaults
2026-04-12 18:17:32 +02:00
Ilia Ross
cf98ce3f55
Fix to normalize websocket path matching
2026-04-12 18:10:22 +02:00
Ilia Ross
c0fb00a6e4
Fix to improve proxied connection validation
...
X260412
2026-04-12 18:08:57 +02:00
Ilia Ross
49b8f1a2fa
Fix to improve proxied connection handling
...
X260412
2026-04-12 14:56:51 +02:00
Joe Cooper
3a1df9d797
Make get_webmin_browser_url proxy-aware
2026-04-11 15:41:40 -05:00
Ilia Ross
11fafb738d
Fix to only show safe files in browser
...
webmin.dev: webmin/webmin / build (push) Has been cancelled
https://github.com/webmin/webmin/issues/1907#issuecomment-4226036213
2026-04-11 18:25:22 +02:00
Ilia Ross
0c2987a326
Fix to support new alerts in Framed Theme too
2026-04-11 17:45:15 +02:00
Ilia Ross
f37a73f0fb
Add support for Apache 2.4 access control editing
...
https://github.com/webmin/webmin/issues/1700#issuecomment-4226653490
2026-04-11 17:44:46 +02:00
Ilia Ross
07321eec44
Add self-contained perltidy wrapper for Webmin style formatting
webmin.dev: webmin/webmin / build (push) Has been cancelled
2026-04-10 21:15:33 +02:00
Ilia Ross
ac8cbf57f9
Fix to handle HTTPS update sources with outbound SSL fallback
2026-04-10 18:56:41 +02:00
Ilia Ross
995f4fa6c1
Fix to normalize URLs (more)
...
https://github.com/webmin/webmin/issues/2663
2026-04-10 15:32:26 +02:00
Ilia Ross
3f3a84c830
Fix to normalize URLs (more)
...
webmin.dev: webmin/webmin / build (push) Has been cancelled
https://github.com/webmin/webmin/issues/2663
2026-04-10 15:27:28 +02:00
Ilia Ross
dde3f1642e
Fix to normalize URLs
...
https://github.com/webmin/webmin/issues/2663
2026-04-10 13:45:14 +02:00
Ilia Ross
2c01d21a1d
Add comments
...
https://github.com/webmin/webmin/issues/2615
2026-04-10 13:17:51 +02:00