Commit Graph

25 Commits

Author SHA1 Message Date
XhmikosR
4aaf7fe0e6 header: move unneeded unauthenticated assets to authenticated
Signed-off-by: XhmikosR <xhmikosr@gmail.com>
2025-06-27 16:43:32 +03:00
XhmikosR
3d7f0d47df Lowercase doctype
It's perfectly valid and it should result in smaller compressed size when gzip is used.

Signed-off-by: XhmikosR <xhmikosr@gmail.com>
2025-06-15 08:18:36 +03:00
Dominik
ed09c524ff Replace invalid hostname to prevent XSS (#3401) 2025-05-14 19:37:52 +02:00
RD WebDesign
66f7e1d081 Use mg.script_name to retrieve the scriptname
This value is independent from webhome or prefix

Signed-off-by: RD WebDesign <github@rdwebdesign.com.br>
2025-05-09 00:05:52 -03:00
yubiuser
d0829308db Replace hostname string if it contains invalid characters
Signed-off-by: yubiuser <github@yubiuser.dev>
2025-04-26 23:39:39 +02:00
XhmikosR
1fbbb91f51 Remove icheckbox related-code except for primary
v6 doesn't support changing this like v5

Signed-off-by: XhmikosR <xhmikosr@gmail.com>
2025-04-21 12:07:06 +03:00
yubiuser
1d9a079fc9 header: fix runtime error when query_string is null (#3395) 2025-04-21 10:21:43 +02:00
Dominik
380c31f4cf Revert the defer addition for now (#3382) 2025-04-21 09:09:34 +02:00
XhmikosR
27b7aaa713 header: fix runtime error when query_string is null
Signed-off-by: XhmikosR <xhmikosr@gmail.com>
2025-04-14 08:45:34 +03:00
yubiuser
6e4a17d8b3 Escape hostname to prevent XSS
Signed-off-by: yubiuser <github@yubiuser.dev>
2025-04-11 09:39:18 +02:00
XhmikosR
2dd128fbfb Revert the defer addition for now
There are still cases we are getting TypeErrors. We should try again after grouping our assets together in all pages.

Signed-off-by: XhmikosR <xhmikosr@gmail.com>
2025-04-03 07:52:28 +03:00
XhmikosR
f343fac2ab Remove x-dns-prefetch-control meta tag
This is now included in FTL

Signed-off-by: XhmikosR <xhmikosr@gmail.com>
2025-03-30 15:37:00 +03:00
Dominik
fb86db5d30 Remove meta http-equiv="cache-control" (#3353) 2025-03-30 10:40:53 +02:00
XhmikosR
39846a3531 Remove meta http-equiv="cache-control"
This is set in FTL to `no-cache, no-store, must-revalidate, private, max-age=0` so this is redundant

Signed-off-by: XhmikosR <xhmikosr@gmail.com>
2025-03-29 10:32:44 +02:00
yubiuser
621ec801e9 Use modernized waitMe plugin
Signed-off-by: yubiuser <github@yubiuser.dev>
2025-03-27 22:01:58 +01:00
XhmikosR
1acb80536b Refactor assets loading
* move fonts first
* move CSS and JS along with the rest
* move default auto theme media checks to the HEAD instead of imports

Also, use `script defer`. This makes the JS files non-blocking.

Signed-off-by: XhmikosR <xhmikosr@gmail.com>
2025-03-23 07:08:37 +02:00
Dominik
877d5f8cb9 Allow path prefix multiplexing the dashboard and API (#3269) 2025-03-22 20:46:37 +01:00
XhmikosR
7ebf4e07df Update fonts
Remove the .woff files since our supported browsers support .woff2

Signed-off-by: XhmikosR <xhmikosr@gmail.com>
2025-03-12 16:38:06 +02:00
DL6ER
5f3bcdac3c Merge branch 'development' into new/web_prefix
Signed-off-by: DL6ER <dl6er@dl6er.de>
2025-03-09 20:15:59 +01:00
XhmikosR
4e6105bef9 Switch to Font Awesome CSS
It's lighter than the JS

Signed-off-by: XhmikosR <xhmikosr@gmail.com>
2025-03-09 20:01:16 +02:00
XhmikosR
6be8b07973 Remove the obsolete X-UA-Compatible meta tag
Signed-off-by: XhmikosR <xhmikosr@gmail.com>
2025-03-09 09:29:15 +02:00
DL6ER
f8ef22572a Store value of pihole.webhome() in a globally available variable instead of calling pihole.webhome() multiple times
Signed-off-by: DL6ER <dl6er@dl6er.de>
2025-03-08 21:37:21 +01:00
DL6ER
a5e2c627a4 Move the decision whether we are showing the no-HTTPS warning from server-side (where no https may be used when a reverse proxy is used) to user-side where this is more definite
Signed-off-by: DL6ER <dl6er@dl6er.de>
2025-03-06 19:58:57 +01:00
yubiuser
5a48c352df Update actual files
Signed-off-by: yubiuser <github@yubiuser.dev>
2024-10-29 16:31:30 +01:00
yubiuser
1e922a8b29 Move all files from /scripts/pi-hole/ to /scripts/
Signed-off-by: yubiuser <github@yubiuser.dev>
2024-10-28 20:22:09 +01:00