It is strongly suggested to download the latest installer and run it. From now on, the installer checks for a newer version of itself on each run, so this manual download is needed only once.
Dashboard:
- security fixes: changing settings requires a password, shell injection and arbitrary file reading and writing through the config paths are fixed, CSRF protection on all forms
- RF signal quality is now shown as bit error rate (BER), averaged over the whole voice stream, with color thresholds from a noise-limited test, and the M17 hostfile comes from the new source and is only downloaded when it has changed (thanks to Jim N1ADJ)
- renamed a couple of menu entries
- times use the configured timezone
- the “Max. text messages” setting now works
- expired map markers are removed
- TX power is read from the config instead of being hardcoded
- the reflector and radio status is now correct regardless of when the connection was made
- added a “Device control” panel with reboot/shutdown buttons
- the last element on each page no longer sits under the fixed footer
The installer script:
- the script automatically sets the modem type based on user input
- the web server can write only
config.phpandfiles/, no longer the whole dashboard directory - nginx: it now blocks web access to the dashboard’s
files/directory
Leave a Reply