Commit Graph

24885 Commits

Author SHA1 Message Date
Jamie Cameron
25f15ce10e Merge branch 'master' of github.com:webmin/webmin
Some checks failed
webmin.dev: webmin/webmin / build (push) Has been cancelled
2026-04-22 08:29:59 -07:00
Ilia Ross
cc9c51c42f Fix potential stored XSS 2026-04-22 13:59:42 +02:00
Jamie Cameron
6a61d50078 Fix label to reflect reality
https://github.com/webmin/webmin/issues/2661
2026-04-21 21:51:37 -07:00
Ilia Ross
948f5bfd77 Fix to make MML files editable
Some checks failed
webmin.dev: webmin/webmin / build (push) Has been cancelled
https://github.com/webmin/webmin/issues/2671
2026-04-21 21:16:55 +02:00
Ilia Ross
73fadd13c8 Fix to decode Outlook winmail.dat with Convert::TNEF safely
Some checks failed
webmin.dev: webmin/webmin / build (push) Has been cancelled
* Note: Replace external tnef/opentnef shelling with Convert::TNEF for
application/ms-tnef attachments.

For root-run Webmin mailbox parsing, decode TNEF as the mailbox owner
instead of root by carrying open_user on mail objects and switching to
that user for the parser temp-file work.

https://github.com/webmin/usermin/issues/132
2026-04-20 19:42:22 +02:00
Ilia Ross
d567b09d24 Fix to handle Certbot standalone port conflicts
Some checks failed
webmin.dev: webmin/webmin / build (push) Has been cancelled
* Note: Add Certbot port-80 warnings and shared runtime checks, while respecting pre-request hooks that may free the port before standalone validation runs.

https://github.com/webmin/webmin/issues/2669#issuecomment-4274711184
2026-04-19 02:00:21 +02:00
Ilia Ross
12069d87af Fix to redirect to SSL edit page with Let's Encrypt tab
Some checks failed
webmin.dev: webmin/webmin / build (push) Has been cancelled
544703c1b8 (r182819336)
2026-04-19 00:11:17 +02:00
Ilia Ross
6c211e721c Update translations 2026-04-18 19:50:53 +02:00
Ilia Ross
bb39d752a9 Update description text and UX 2026-04-18 19:50:26 +02:00
Ilia Ross
ae35b100c2 Update tiny ACME client 2026-04-18 19:35:27 +02:00
Ilia Ross
84c50bba95 Update translations 2026-04-18 19:35:09 +02:00
Ilia Ross
544703c1b8 Add custom ACME server support to Webmin SSL renewal
* Note: Adds support for custom ACME directory URLs in Webmin’s SSL certificate flow, including optional EAB credentials, renewal persistence, and compatibility fixes for saved validation modes.

https://github.com/webmin/webmin/issues/2669
2026-04-18 19:34:03 +02:00
Ilia Ross
44c7b36160 Fix saved LE validation mode handling
https://github.com/webmin/webmin/issues/2669
2026-04-18 14:59:51 +02:00
Ilia Ross
6639768aa4 Update comments in repo setup
Some checks failed
webmin.dev: webmin/webmin / build (push) Has been cancelled
2026-04-17 17:34:34 +02:00
Ilia Ross
39a4b9454d Fix to improve temporary file handling in repo setup 2026-04-17 17:31:25 +02:00
Ilia Ross
9d6b7bc939 Fix to handle sources list cleanup more safely in repo setup
https://github.com/webmin/webmin/issues/2277#issuecomment-4230377785
2026-04-17 15:53:34 +02:00
Ilia Ross
4f3e993ae6 Merge swelljoe/nftables as new nftables module
Import https://github.com/swelljoe/nftables into the Webmin tree under nftables/ while preserving upstream history.
2026-04-17 15:19:20 +02:00
Ilia Ross
632232fff0 Update .gitignore
Some checks failed
webmin.dev: webmin/webmin / build (push) Has been cancelled
[no-build]
2026-04-17 14:43:06 +02:00
Ilia Ross
4d680b1ea9 Fix SHA512/yescrypt error messages to reflect crypt() support
https://github.com/webmin/webmin/issues/2656
2026-04-17 14:36:27 +02:00
Jamie Cameron
f03140314e Merge branch 'master' of github.com:webmin/webmin
Some checks failed
webmin.dev: webmin/webmin / build (push) Has been cancelled
2026-04-16 20:02:02 -07:00
Jamie Cameron
6c77b24da6 The crypt function can natively support SHA512
https://github.com/webmin/webmin/issues/2656
2026-04-16 20:01:55 -07:00
Ilia Ross
a293fff996 Fix to default TOTP QR generation to QRCode::Encoder
Some checks failed
webmin.dev: webmin/webmin / build (push) Has been cancelled
Webmin now uses the bundled QRCode::Encoder implementation by default to generate TOTP QR codes locally and inline, without relying on qr.cgi or external services.

This encoder requires Perl 5.24 or newer, so qrencode is no longer included as a recommended package dependency. On older systems where the bundled encoder cannot run, admins can still install qrencode manually to restore QR generation support.

Systems old enough to lack Perl 5.24 are typically already well past their supported security lifecycle, so keeping qrencode preinstalled by default is no longer treated as a packaging requirement. When neither option is available, Webmin falls back cleanly to manual TOTP setup using the shared secret.

https://github.com/webmin/webmin/issues/2667#issuecomment-4247431279

[no-build]
2026-04-16 23:08:00 +02:00
Ilia Ross
da18a16c84 Fix to require 2FA for RPC basic auth
Some checks failed
webmin.dev: webmin/webmin / build (push) Has been cancelled
+ improve remote auth errors
2026-04-15 22:36:40 +02:00
Jamie Cameron
0424a98a9b Fall back to uisng df if disk space cannot be computed from the zpool
Some checks failed
webmin.dev: webmin/webmin / build (push) Has been cancelled
https://github.com/webmin/webmin/issues/2653
2026-04-14 19:55:13 -07:00
Jamie Cameron
ba336c297b Make check for 'X-SSL-Client-Verify' header stricter 2026-04-14 16:19:22 -07:00
Jamie Cameron
7183af2fdd Compute used and used percent for ZFS
https://github.com/webmin/webmin/issues/2653
2026-04-14 16:16:54 -07:00
Jamie Cameron
02dd602d07 Merge branch 'master' of github.com:webmin/webmin 2026-04-14 16:09:26 -07:00
Jamie Cameron
59fae69c6b Missing return statement 2026-04-14 16:09:20 -07:00
Ilia Ross
3bd85ab407 Add multi-statement SQL script support when executing inline script
https://forum.virtualmin.com/t/edit-databases-sql-query-box-strange-behavior/136988

[no-build]
2026-04-14 23:02:15 +02:00
Ilia Ross
87d8969efb Fix to gate forwarded proxy URL for consistency
Some checks failed
webmin.dev: webmin/webmin / build (push) Has been cancelled
https://github.com/webmin/webmin/pull/2666#issuecomment-4241962133
2026-04-14 14:44:57 +02:00
Ilia Ross
97774b829d Fix to trust forwarded URL headers if proxy headers are trusted
Some checks failed
webmin.dev: webmin/webmin / build (push) Has been cancelled
https://github.com/webmin/webmin/pull/2666
2026-04-13 15:55:31 +02:00
Ilia Ross
33e03595cf Merge pull request #2666 from swelljoe/proxy-friendly-get_webmin_browser_url
Make get_webmin_browser_url proxy-aware
2026-04-13 15:31:08 +02:00
Jamie Cameron
4b79787fb2 Direct links to xterm do not need to be supported
Some checks failed
webmin.dev: webmin/webmin / build (push) Has been cancelled
2026-04-12 13:01:23 -07:00
Ilia Ross
bd7e91c712 Fix comment shift ; add missing comments
Some checks failed
webmin.dev: webmin/webmin / build (push) Has been cancelled
2026-04-12 19:03:12 +02:00
Ilia Ross
67950afe3a Add configurable redaction for logged request parameters 2026-04-12 19:01:14 +02:00
Ilia Ross
a6156ff76b Add configurable websocket origin exceptions (for weird cases) 2026-04-12 18:35:21 +02:00
Ilia Ross
6de6529bba Fix to harden session cookie defaults 2026-04-12 18:17:32 +02:00
Ilia Ross
cf98ce3f55 Fix to normalize websocket path matching 2026-04-12 18:10:22 +02:00
Ilia Ross
c0fb00a6e4 Fix to improve proxied connection validation
X260412
2026-04-12 18:08:57 +02:00
Ilia Ross
49b8f1a2fa Fix to improve proxied connection handling
X260412
2026-04-12 14:56:51 +02:00
Joe Cooper
3a1df9d797 Make get_webmin_browser_url proxy-aware 2026-04-11 15:41:40 -05:00
Ilia Ross
11fafb738d Fix to only show safe files in browser
Some checks failed
webmin.dev: webmin/webmin / build (push) Has been cancelled
https://github.com/webmin/webmin/issues/1907#issuecomment-4226036213
2026-04-11 18:25:22 +02:00
Ilia Ross
0c2987a326 Fix to support new alerts in Framed Theme too 2026-04-11 17:45:15 +02:00
Ilia Ross
f37a73f0fb Add support for Apache 2.4 access control editing
https://github.com/webmin/webmin/issues/1700#issuecomment-4226653490
2026-04-11 17:44:46 +02:00
Ilia Ross
07321eec44 Add self-contained perltidy wrapper for Webmin style formatting
Some checks failed
webmin.dev: webmin/webmin / build (push) Has been cancelled
2026-04-10 21:15:33 +02:00
Ilia Ross
ac8cbf57f9 Fix to handle HTTPS update sources with outbound SSL fallback 2026-04-10 18:56:41 +02:00
Ilia Ross
995f4fa6c1 Fix to normalize URLs (more)
https://github.com/webmin/webmin/issues/2663
2026-04-10 15:32:26 +02:00
Ilia Ross
3f3a84c830 Fix to normalize URLs (more)
Some checks failed
webmin.dev: webmin/webmin / build (push) Has been cancelled
https://github.com/webmin/webmin/issues/2663
2026-04-10 15:27:28 +02:00
Ilia Ross
dde3f1642e Fix to normalize URLs
https://github.com/webmin/webmin/issues/2663
2026-04-10 13:45:14 +02:00
Ilia Ross
2c01d21a1d Add comments
https://github.com/webmin/webmin/issues/2615
2026-04-10 13:17:51 +02:00