What's Changed
- Fix the Agent Error callback and path testing @swissmakers in #153
- Improve error handling on the connector agent, replace hardcoded english API-Errors @swissmakers in #153
- Add Systemd support to f2b-ui action by @Baspar in #148
- Add better checking for I/O-errors for bufio-scanner by @swissmakers in #155
- Added helper function that forces only 465 to implicit TLS, all other is using plain connect then optional upgrade to STARTLS
by @swissmakers in #155 - Use new determistic UTC time format already on 'record', better compatibility for elasticsearch and fix new last hour bug by @swissmakers in #156
- Fix possible path injection vulnerability with seperate function also defined a save allowlist for config-names @swissmakers in #157
- Harden the mikrotik-ssh connection to use a SHA256 fingerprint for validation, if set @swissmakers in #157
- Add validation-functions 'ValidateJailName' and 'ValidateOutboundURL' to handler / connector functions that should validate the content before proceeding also sanitize email-headers before sending @swissmakers in #157
- Add validate-function to check that user-configured base URL is well-formated and uses allowed scheme like http/https @swissmakers in #157
- Include the OutboundURL validation to the PFsense and OpenSense integration, test with added tests @swissmakers in #157
- Created email test-file for testing new header sanitize/protection @swissmakers in #157
- Implement open-redirect, injection guards for the basepath unsafe values now collapse to root @swissmakers in #157
- Adding the Mikrotik router's SSH host key fingerprint input and translation to frontend @swissmakers in #157
- Implement escapeJs function for escaping embeddings inside JavaScript as string literals or HTML attributes @swissmakers in #157
- Bump github.com/quic-go/quic-go from 0.59.0 to 0.59.1 by @dependabot[bot] in #158
- Adding SSH cap for session reusage to respect limits of sshd by @swissmakers in #160
- Implement fix, for journalctl log-support and not defined journalmatch that causes json parsing errors by @swissmakers in #160
- Show loading overlay as default on first HTML-paint @swissmakers in #161
- Remove whois/logs from normal dashboard payload and move that to a seperate API function. @swissmakers in #161
- Change whois and banlogs modal to load the logs on request per ban-event (modal opening) @swissmakers in #161
- Add generic 'toast' message type, to deliver also system-messages, over websocket @swissmakers in #161
- Register new API call to get per-ban insights, especialy to resive the new whois/log data for the dashboard. Also test-include the new websocket toast pusher for email-sending-fails @swissmakers in #161
New Contributors
Full Changelog: v.1.4.9...v.1.5.0