25419 Commits

Author SHA1 Message Date
Ilia Ross
4f3e993ae6 Merge swelljoe/nftables as new nftables module
Import https://github.com/swelljoe/nftables into the Webmin tree under nftables/ while preserving upstream history.
2026-04-17 15:19:20 +02:00
Ilia Ross
632232fff0 Update .gitignore
Some checks failed
webmin.dev: webmin/webmin / build (push) Has been cancelled
[no-build]
2026-04-17 14:43:06 +02:00
Ilia Ross
4d680b1ea9 Fix SHA512/yescrypt error messages to reflect crypt() support
https://github.com/webmin/webmin/issues/2656
2026-04-17 14:36:27 +02:00
Jamie Cameron
f03140314e Merge branch 'master' of github.com:webmin/webmin
Some checks failed
webmin.dev: webmin/webmin / build (push) Has been cancelled
2026-04-16 20:02:02 -07:00
Jamie Cameron
6c77b24da6 The crypt function can natively support SHA512
https://github.com/webmin/webmin/issues/2656
2026-04-16 20:01:55 -07:00
Ilia Ross
a293fff996 Fix to default TOTP QR generation to QRCode::Encoder
Some checks failed
webmin.dev: webmin/webmin / build (push) Has been cancelled
Webmin now uses the bundled QRCode::Encoder implementation by default to generate TOTP QR codes locally and inline, without relying on qr.cgi or external services.

This encoder requires Perl 5.24 or newer, so qrencode is no longer included as a recommended package dependency. On older systems where the bundled encoder cannot run, admins can still install qrencode manually to restore QR generation support.

Systems old enough to lack Perl 5.24 are typically already well past their supported security lifecycle, so keeping qrencode preinstalled by default is no longer treated as a packaging requirement. When neither option is available, Webmin falls back cleanly to manual TOTP setup using the shared secret.

https://github.com/webmin/webmin/issues/2667#issuecomment-4247431279

[no-build]
2026-04-16 23:08:00 +02:00
Ilia Ross
da18a16c84 Fix to require 2FA for RPC basic auth
Some checks failed
webmin.dev: webmin/webmin / build (push) Has been cancelled
+ improve remote auth errors
2026-04-15 22:36:40 +02:00
Jamie Cameron
0424a98a9b Fall back to uisng df if disk space cannot be computed from the zpool
Some checks failed
webmin.dev: webmin/webmin / build (push) Has been cancelled
https://github.com/webmin/webmin/issues/2653
2026-04-14 19:55:13 -07:00
Jamie Cameron
ba336c297b Make check for 'X-SSL-Client-Verify' header stricter 2026-04-14 16:19:22 -07:00
Jamie Cameron
7183af2fdd Compute used and used percent for ZFS
https://github.com/webmin/webmin/issues/2653
2026-04-14 16:16:54 -07:00
Jamie Cameron
02dd602d07 Merge branch 'master' of github.com:webmin/webmin 2026-04-14 16:09:26 -07:00
Jamie Cameron
59fae69c6b Missing return statement 2026-04-14 16:09:20 -07:00
Ilia Ross
3bd85ab407 Add multi-statement SQL script support when executing inline script
https://forum.virtualmin.com/t/edit-databases-sql-query-box-strange-behavior/136988

[no-build]
2026-04-14 23:02:15 +02:00
Ilia Ross
87d8969efb Fix to gate forwarded proxy URL for consistency
Some checks failed
webmin.dev: webmin/webmin / build (push) Has been cancelled
https://github.com/webmin/webmin/pull/2666#issuecomment-4241962133
2026-04-14 14:44:57 +02:00
Ilia Ross
97774b829d Fix to trust forwarded URL headers if proxy headers are trusted
Some checks failed
webmin.dev: webmin/webmin / build (push) Has been cancelled
https://github.com/webmin/webmin/pull/2666
2026-04-13 15:55:31 +02:00
Ilia Ross
33e03595cf Merge pull request #2666 from swelljoe/proxy-friendly-get_webmin_browser_url
Make get_webmin_browser_url proxy-aware
2026-04-13 15:31:08 +02:00
Jamie Cameron
4b79787fb2 Direct links to xterm do not need to be supported
Some checks failed
webmin.dev: webmin/webmin / build (push) Has been cancelled
2026-04-12 13:01:23 -07:00
Ilia Ross
bd7e91c712 Fix comment shift ; add missing comments
Some checks failed
webmin.dev: webmin/webmin / build (push) Has been cancelled
2026-04-12 19:03:12 +02:00
Ilia Ross
67950afe3a Add configurable redaction for logged request parameters 2026-04-12 19:01:14 +02:00
Ilia Ross
a6156ff76b Add configurable websocket origin exceptions (for weird cases) 2026-04-12 18:35:21 +02:00
Ilia Ross
6de6529bba Fix to harden session cookie defaults 2026-04-12 18:17:32 +02:00
Ilia Ross
cf98ce3f55 Fix to normalize websocket path matching 2026-04-12 18:10:22 +02:00
Ilia Ross
c0fb00a6e4 Fix to improve proxied connection validation
X260412
2026-04-12 18:08:57 +02:00
Ilia Ross
49b8f1a2fa Fix to improve proxied connection handling
X260412
2026-04-12 14:56:51 +02:00
Joe Cooper
3a1df9d797 Make get_webmin_browser_url proxy-aware 2026-04-11 15:41:40 -05:00
Ilia Ross
11fafb738d Fix to only show safe files in browser
Some checks failed
webmin.dev: webmin/webmin / build (push) Has been cancelled
https://github.com/webmin/webmin/issues/1907#issuecomment-4226036213
2026-04-11 18:25:22 +02:00
Ilia Ross
0c2987a326 Fix to support new alerts in Framed Theme too 2026-04-11 17:45:15 +02:00
Ilia Ross
f37a73f0fb Add support for Apache 2.4 access control editing
https://github.com/webmin/webmin/issues/1700#issuecomment-4226653490
2026-04-11 17:44:46 +02:00
Ilia Ross
07321eec44 Add self-contained perltidy wrapper for Webmin style formatting
Some checks failed
webmin.dev: webmin/webmin / build (push) Has been cancelled
2026-04-10 21:15:33 +02:00
Ilia Ross
ac8cbf57f9 Fix to handle HTTPS update sources with outbound SSL fallback 2026-04-10 18:56:41 +02:00
Ilia Ross
995f4fa6c1 Fix to normalize URLs (more)
https://github.com/webmin/webmin/issues/2663
2026-04-10 15:32:26 +02:00
Ilia Ross
3f3a84c830 Fix to normalize URLs (more)
Some checks failed
webmin.dev: webmin/webmin / build (push) Has been cancelled
https://github.com/webmin/webmin/issues/2663
2026-04-10 15:27:28 +02:00
Ilia Ross
dde3f1642e Fix to normalize URLs
https://github.com/webmin/webmin/issues/2663
2026-04-10 13:45:14 +02:00
Ilia Ross
2c01d21a1d Add comments
https://github.com/webmin/webmin/issues/2615
2026-04-10 13:17:51 +02:00
Ilia Ross
6337f2fefa Add tiny compatibility helper that builds ANSI escape strings
https://github.com/webmin/webmin/issues/2615
2026-04-10 13:12:05 +02:00
Ilia Ross
de9e95facf Add support for ext4 hidden inode (superblock) quota mode
Some checks failed
webmin.dev: webmin/webmin / build (push) Has been cancelled
https://forum.virtualmin.com/t/quotacheck-fails-with-unknown-quota-format-on-ext4-native-quota-ubuntu-24-04/136963/
2026-04-09 22:11:47 +02:00
Ilia Ross
5cf228d4a0 Add side by side UI form buttons API
Some checks failed
webmin.dev: webmin/webmin / build (push) Has been cancelled
https://github.com/webmin/webmin/issues/2659

[no-build]
2026-04-09 19:33:37 +02:00
Ilia Ross
0e45e0bcbd Update translations consistency
Some checks failed
webmin.dev: webmin/webmin / build (push) Has been cancelled
https://github.com/webmin/webmin/issues/2655
2026-04-09 00:11:17 +02:00
Ilia Ross
bdb98c49c9 Fix language
https://github.com/webmin/webmin/issues/2655
2026-04-09 00:08:07 +02:00
Ilia Ross
9369441fc5 Fix to avoid auto-fill for URL auth
https://github.com/webmin/webmin/issues/2655
2026-04-09 00:07:08 +02:00
Ilia Ross
77e488b4b6 filemin: reindent and add function comments 2026-04-08 19:53:49 +02:00
Ilia Ross
26faad0d39 Fix regression in previous refactor
Some checks failed
webmin.dev: webmin/webmin / build (push) Has been cancelled
2026-04-08 17:45:15 +02:00
Ilia Ross
886cf142db Fix indent (more) 2026-04-08 17:31:51 +02:00
Ilia Ross
d4439b445c Fix indent 2026-04-08 17:16:54 +02:00
Ilia Ross
5a336902f8 Add vars declarations 2026-04-08 17:09:16 +02:00
Jamie Cameron
19b0f187ba The [mysqld] section may be [mariadb]
https://github.com/webmin/webmin/issues/2650
2026-04-08 08:06:52 -07:00
Jamie Cameron
4a283d2180 Template description should be escaped 2026-04-08 07:56:12 -07:00
Jamie Cameron
670f33c872 Merge branch 'master' of github.com:webmin/webmin 2026-04-08 06:24:40 -07:00
Jamie Cameron
b5b65f06b7 Factor out function to get allowed paths 2026-04-08 06:24:32 -07:00
Ilia Ross
b02d797bc6 Fix the issue with disabled email for status report
Some checks failed
webmin.dev: webmin/webmin / build (push) Has been cancelled
https://github.com/virtualmin/virtualmin-gpl/issues/1202
2026-04-08 00:31:53 +02:00