pi-hole/web v6.5

on GitHub

What's Changed

• Amend teleporter help text that the long-term data is not included by @yubiuser in #3721
• Do not use 3 columns when boxed layout is used by @rdwebdesign in #3722
• Use ENTER instead of ⏎ by @yubiuser in #3727
• Don't link to github releases if docker tag is nightly by @yubiuser in #3718
• Do not try to compare component version when remote version info is not available by @yubiuser in #3729
• Show loading overlay when adding/removing CNAME records as it requires a FTL restart by @yubiuser in #3742
• fix: check on responseJSON when wrong password by @guybrush2105 in #3693
• Remove the loggingButton from Settings > System > Actions by @yubiuser in #3747

Security Advisories

• Multiple Stored HTML Injections and XSS in different web interface pages reported by @andrejtomci

  • GHSA-jx8x-mj2r-62vq - Stored HTML Injection in queries.js

  • GHSA-9rfm-c5g6-538p - Stored HTML attribute injection

  • GHSA-px6w-85wp-ww9v - Stored XSS / HTML injection in the Network page/Dashboard

  • GHSA-7xqw-r9pr-qv59 - Reflected XSS / HTML injection in taillog.js (Also reported by @n1rwhex and @mzalzahrani)

New Contributors

• @guybrush2105 made their first contribution in #3693

Full Changelog: v6.4.1...v6.5