9.07.2907 release

Changes from 9.05.2872 to 9.07.2907

New Features

• Portal Cache: Implement portal cache lazy loading module for faster portal page delivery
• MAC Blacklist: Add MAC blacklist (untrust_macs) nftables support and wdctlx CLI command
• MQTT API: Add untrusted MAC (blacklist) MQTT API handlers for remote management
• QoS: Use request rate limits in BPF add handler for better traffic control
• CORS Support: Add dynamic CORS headers with credential support for portal cache requests

Bug Fixes

• Security: Disable public temporary_pass and correct auth server request send
• URL Handling: URL encode SSID in redirect URL to handle special characters
• Memory Management: Resolve request memory leak and shutdown cleanup issues
• Crash Prevention: Fix null pointer crash and connection memory leak (P0 bugs)
• Portal Cache: Fix forward declaration for portal_cache_download_async
• Portal Cache: Replace wget fork+exec with libevent async HTTP client for better performance
• Portal Cache: Code review improvements (P0-P2 issues)
• Portal Redirect: Use correct protocol based on user request for redirect URLs
• Portal Cache: Replace curl with wget for better compatibility
• BPF: Correct MAC address display in bpf list command
• BPF: Prevent infinite loop in bpf_map_get_next_key traversal
• DNS: Remove redundant kernel sync calls and debug logs
• Resource Management: Handle resource cleanup on request queueing failures
• Firewall: Move blacklist rule to filter_prerouting chain and fix strncpy warning
• Firewall: Fix fw_allow/fw_deny dual-stack independent evaluation
• WiFi: Remove global g_ssid variable and use correct SSID from bridge FDB
• WiFi: Handle empty SSID in ping and portal redirect URLs
• Network: Use INET_ADDRSTRLEN instead of INET_ADDRSTRLEN-1 in inet_ntop
• Auth: Detect redirect loop when auth server hostname resolves to gateway IP

Version

• Version bumped to 9.07.2907