v5.10.1

What's Changed

• Fix CPU info on status panel by @rdwebdesign in #2049

Full Changelog: v5.10...v5.10.1

v5.10

What's Changed

• Add link to Pi-hole docs when showing dnsmasq warnings by @DL6ER in #2017
• Fix gradient transparency issues in Safari by @Iksas in #2018
• Use SVG to generate the QR code by @rdwebdesign in #2022
• LCARS theme additions by @rdwebdesign in #2019
• Improve appearance of the main menu by @DL6ER in #2023
• Add border to status indicators in the LCARS theme by @Iksas in #2024
• Fix LCARS top navbar by @rdwebdesign in #2025
• Revert "Fix LCARS top navbar" by @rdwebdesign in #2027
• Fixing PR #2025 - top navbar by @rdwebdesign in #2028
• Fix invisible buttons in password fields (desktop Safari) by @Iksas in #2020
• Localize summary numbers by @DL6ER in #2029
• Fixing PHP warnings in "qrcode.php" by @rdwebdesign in #2033
• Remove text transformation from update command by @Iksas in #2037
• Include FTL's DNS port in web status and give the temperature its own line by @yubiuser in #2031
• Status panel (.user-panel) visual adjustments by @rdwebdesign in #2040
• Prevent ad blockers from blocking query log UI elements by @Iksas in #2039
• master -> devel by @PromoFaux in #2045
• Fix mislabeled privacy setting by @Cauchon in #2044
• Tweak DHCP datatables by @Moonlight63 in #2042

New Contributors

• @Cauchon made their first contribution in #2044
• @Moonlight63 made their first contribution in #2042

Full Changelog: v5.9...v5.10

v5.9

What's Changed

• Fix date ranges in datarangepicker in long-term data by @yubiuser in #1940
• Fix dashboard icon animations in Safari by @Iksas in #1939
• Set stateDuration to 0 for all saved datatables to store the state indefinitely by @yubiuser in #1944
• Tweak to datatables column rendering by @PromoFaux in #1948
• Add missing blocked boolean in queries.js by @dylansealy in #1950
• Add Star Trek LCARS theme by @rdwebdesign in #1936
• Queryads single DIV and responsive CSS (fixed) by @rdwebdesign in #1952
• Add missing rel="noopener" attributes by @dylansealy in #1956
• Sidebar and nav-tab-custom: additional CSS for focus state by @rdwebdesign in #1955
• Allowing data loading after selecting/deselecting options - Long-term data > Query Log by @rdwebdesign in #1957
• fix: exclude status checkboxes from being treated as iCheck elements by @lionralfs in #1910
• Long-term graph changes by @rdwebdesign in #1969
• small typo in IP_ADDPRESS_OF_YOUR_PI_HOLE; two minor copy tweaks by @Homesteady in #1972
• Add pretty-printing for message type DNSMASQ_WARN by @DL6ER in #1973
• Fix the icon position (login password field) by @rdwebdesign in #1974
• Revert "Remove duplicated code as it is already part of utils.stateLoadCallback" by @yubiuser in #1975
• Improving the display of some graphics by @rdwebdesign in #1976
• Remove traces of leftover API_PRIVACY_MODE by @yubiuser in #1943
• Use theme gridColor and ticksColor in long time graph by @yubiuser in #1977
• Swaping bar colors on "db_lists.js". by @rdwebdesign in #1981
• Redo of Fixes background of the dark-midnight theme #1961 by @yubiuser in #1966
• Fix PHP 8 incompatibility on settings page by @DL6ER in #1970
• Fix DHCP tables button column by @yubiuser in #1982
• Add note to message table how to generate debug log by @yubiuser in #1962
• Remove obsolete code from network.php by @yubiuser in #1979
• Add message types LOAD, SHMEM and DISK to Pi-hole diagnosis system by @DL6ER in #1989
• Add bounce animation to Pi-hole diagnosis warning triangle by @DL6ER in #1990
• Applying the same colors (CSS colors) used on the dashboard, for consistency. by @rdwebdesign in #1992
• Number of domains on adlist is total number not valid number by @yubiuser in #1995
• Select PHP version for phpstan by @rdwebdesign in #2007
• Change default theme to auto light/dark theme by @yubiuser in #2006
• Show ignored items when adding new adlists by @rdwebdesign in #1997
• Improving code readability for lists (index.js and db_lists.js) by @rdwebdesign in #1994
• Improve interface settings by @DL6ER in #2011
• Add absent tags by @paul-man in #1991
• Avoid window.open and add more visible eye icon by @paul-man in #1996
• Add padding to apple fav icon and set background to black by @yubiuser in #2003
• Reduce eye size by @DL6ER in #2015
• Better output for "prettier" test by @rdwebdesign in #2014
• Pi-hole web v5.9 by @DL6ER in #2016

New Contributors

• @Iksas made their first contribution in #1939
• @Homesteady made their first contribution in #1972

Full Changelog: v5.8...v5.9

Pi-hole web v5.8

What's Changed

• Dashboard icons - send to back and fixing position when scaled up #1915 by @rdwebdesign
• Unescape German umlauts #1914 by @yubiuser
• Add note to query log that pi.hole queries are not logged #1913 by @yubiuser
• Do not default true for unset variables DNS_FQDN_REQUIRED and DNS_BOGUS_PRIV #1909 by @yubiuser
• Background colors on Query log + striped table #1916 by @rdwebdesign
• fix: row background colors in query log #1906 by @lionralfs
• Make entire Forgot Password box header clickable #1917 by @davidjb
• #1777 "Remember me for 7 days" doesn't work if you log in from Recent Queries #1870 by @chrismiceli
• Handle empty "" domain in query top list correctly #1790 by @yubiuser
• Modal-Dialog for Teleporter-import #1231 by @Th3M3
• Suppress empty lines during teleporter import #1921 by @yubiuser
• Do not try to resolve hostname of clients in long-term data #1931 by @yubiuser
• Add delete button to the network table to allow deleting individual entries #1924 by @yubiuser
• Do not restart for every item during Teleporter import of Local DNS record or CNAME #1925 by @yubiuser
• Display Docker Tag in footer if the PIHOLE_DOCKER_TAG environment variable is detected #1933 by @PromoFaux
• Set font's color in teleporter iframe (fix for #1923) #1934 by @PromoFaux
• Prevent possible XSS attack vector on add_client GHSA-mhr8-7rvg-8r43 thanks to @stypr and @rpunnett for reporting

Full Changelog: v5.7...v5.8

Pi-hole web v5.7

• Remove adlists tab from settings page #1845
• footer.php: move FTL before Web Interface #1854 @XhmikosR
• Add forgotten target_blank #1884
• Add delete button to message table #1886
• Clarify that never forward non-FQDN only applies to A and AAAA queries #1887
• Simple maintenance improvements #1892 @a1346054
• Add background colors on Query log + switchable text coloring (as before) #1893 @PromoFaux @DL6ER
• Lift prefix limitaion for --rev-server #1897

All @yubiuser unless otherwise specified

Pi-hole web v5.6

• Password autocompletion #1785
• Try to obtain hostname for MAC clients #1793
• Improvement to readability of footer "update" command text #1797
• Added the option for an automatic dark mode based on the device status #1836
• Add reply type DNSSEC #1837
• Adding CORS support via environment variable #1822
• Fix domain validation method #1852
• Fix require func.php #1855
• Add interpretation for Pi-hole message type RATE_LIMIT #1859
• Stop timer when user reenabled blocking early #1863
• Fix TypeError if no extended DNS error is available #1862
• Import two fixes #1867
• Add new blocked by database status and NONE reply type #1869
• Add httponly = true to persistent login cookie #1875
• Apply htmlentities in a couple of places to prevent xss #1876
• Clarify how and when UQDN are forwarded with conditional forwarding #1873
• Less color for the Query Log #1872
• Add BLOB reply type #1871
• footer.php: move FTL before Web Interface #1854
• Remove adlists tab from settings page #1845

Pi-hole web v5.5.1

Hotfix release to address two security advisories:

GHSA-g3w6-q4fg-p8x8 - "Stored XSS Vulnerability in the Pi-hole Webinterface" reported by both Dariusz Gońda and @awareseven

GHSA-5cm9-6p3m-v259 - "(Authenticated) Remote Code Execution Possible in Web Interface 5.5" reported by @SchneiderSec

Pi-hole web v5.5

• Add details to adlist table #1673
• Don't count new status types as blocked queries in long-term data #1743
• Add hint for update command & documentation link #1749
• Add Pi-hole darker theme #1731
• Trim CNAME target input field value data #1759

Pi-hole web v5.4

This release contains some security patches, as reported by Veno Eivazian

• Properly escape possible user-input 22d7df9
• Prevent javascript XSS attacks aimed to steal the session ID d4e46df
• Regenerate session ID on successful login to prevent session fixation 64b3656

Pi-hole web v5.3.2

This release fixes Unknown (0) queries as reported in #1713

Reason: dnsmasq-v2.83+ forwards multiple queries to the same destination once and stores the other queries as duplicates. They do receive the answer later on, however, this is usually not logged (when log-queries=extra is enabled, there will be a warning about the duplicate). FTL v5.6 introduces a new reply type 14 = "already forwarded" to fix this.