Pi-hole Web v6.3 by PromoFaux · Pull Request #3594 · pi-hole/web

PromoFaux · 2025-08-27T20:06:13Z

What's Changed

Clarify client description priorities on the groups/client interface by @DL6ER in Clarify client description priorities on the groups/client interface #3521
Remove superfluous settings-level-expert class by @yubiuser in Remove superfluous settings-level-expert class #3503
Remove link to rate limit documentation which does not add further etails by @yubiuser in Remove link to rate limit documentation which does not add further etails #3526
Add some color to gravity output by @yubiuser in Add some color to gravity output #3530
settings-system : Avoid division by zero in DNS metrics by @rrobgill in settings-system : Avoid division by zero in DNS metrics #3533
Make the "Add to denied/allowed domains" buttons red and green by @darkexplosiveqwx in Make the "Add to denied/allowed domains" buttons red and green #3551
Remove query type from domainNeeded option by @yubiuser in Remove query type from domainNeeded option #3557
Handle pie chart item style conditionally by @yubiuser in Handle pie chart item style conditionally #3532
Use label-primary for number of enabled list icon on sidebar by @yubiuser in Use label-primary for number of enabled list icon on sidebar #3563
Use innerHTML instead of append to fix gravity color output by @yubiuser in Use innerHTML instead of append to fix gravity color output #3566
Trim whitespaces before adding custom DNS record by @yubiuser in Trim whitespaces before adding custom DNS record #3569
Bind address to new element instead of raw HTML construction by @DL6ER in Bind address to new element instead of raw HTML construction #3567
Use /flush/network instead of /flush/arp by @yubiuser in Use /flush/network instead of /flush/arp #3553
Prevents getting stuck loading unlimited query log results by @ablankenship10 in Prevents getting stuck loading unlimited query log results #3592
Fix 2FA icon styles 2FA icon is misaligned #3431 by @idotj in Fix 2FA icon styles #3431 #3585
Fix header.lp closing head tag formatting by @h3xcat in Fix header.lp closing head tag formatting #3607
Fix the link on the upstream chart legend by @rdwebdesign in Fix the link on the upstream chart legend #3606
Rename config key dns.domain > dns.domain.name by @yubiuser in Rename config key dns.domain > dns.domain.name #3611
Improve line graph tooltip by @yubiuser in Improve line graph tooltip #3601
Make DNSSEC icon conditional in Queries Log (redo of Make DNSSEC icon conditional in Queries Log #3399) by @yubiuser in Make DNSSEC icon conditional in Queries Log (redo of https://github.com/pi-hole/web/pull/3399/) #3535
Query Log: The underscore is special by @DL6ER in Query Log: The underscore is special #3578
Fix addList function to include type in API request URL by @PromoFaux in Fix addList function to include type in API request URL #3620
Pin github action to SHA by @yubiuser in Pin github action to SHA #3593
Adjust domain count according to Expose both total and enabled for gravity tables FTL#2177 by @yubiuser in Adjust domain count according to pi-hole/FTL#2177 #3619
Also pin editorconfigchecker by sha by @yubiuser in Also pin editorconfigchecker by sha #3621
Update FTL %cpu and %mem everytime total CPU stats are updated by @yubiuser in Update FTL %cpu and %mem everytime total CPU stats are updated #3622
Clarify uptime in container matching the host uptime with a tooltip by @yubiuser in Clarify uptime in container matching the host uptime with a tooltip #3624
Adjust text BitWarden to Bitwarden by @jprusik in Adjust text BitWarden to Bitwarden #3629

New Contributors

@darkexplosiveqwx made their first contribution in Make the "Add to denied/allowed domains" buttons red and green #3551
@ablankenship10 made their first contribution in Prevents getting stuck loading unlimited query log results #3592
@idotj made their first contribution in Fix 2FA icon styles #3431 #3585
@h3xcat made their first contribution in Fix header.lp closing head tag formatting #3607
@jprusik made their first contribution in Adjust text BitWarden to Bitwarden #3629

Full Changelog: v6.2.1...v6.3

Bumps [postcss](https://github.com/postcss/postcss) from 8.5.3 to 8.5.4. - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.3...8.5.4) --- updated-dependencies: - dependency-name: postcss dependency-version: 8.5.4 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

…han zero Signed-off-by: XhmikosR <xhmikosr@gmail.com>

There's no HTML involved. Signed-off-by: XhmikosR <xhmikosr@gmail.com>

Signed-off-by: yubiuser <github@yubiuser.dev>

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.18 to 3.28.19. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@v3.28.18...v3.28.19) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 3.28.19 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.19 to 3.29.0. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@v3.28.19...v3.29.0) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 3.29.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [postcss](https://github.com/postcss/postcss) from 8.5.4 to 8.5.5. - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.4...8.5.5) --- updated-dependencies: - dependency-name: postcss dependency-version: 8.5.5 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: XhmikosR <xhmikosr@gmail.com>

It's perfectly valid and it should result in smaller compressed size when gzip is used. Signed-off-by: XhmikosR <xhmikosr@gmail.com>

Signed-off-by: XhmikosR <xhmikosr@gmail.com>

* Update chart.js to v4.5.0 Also, switch to the minified file Signed-off-by: XhmikosR <xhmikosr@gmail.com> * Update scripts/lua/header_authenticated.lp Co-authored-by: yubiuser <github@yubiuser.dev> Signed-off-by: XhmikosR <xhmikosr@gmail.com> --------- Signed-off-by: XhmikosR <xhmikosr@gmail.com> Co-authored-by: yubiuser <github@yubiuser.dev>

This is taken care of in utils.setTimer. Fixes status not showing when opening a new tab. Previously, it was shown after the timer fired. Signed-off-by: XhmikosR <xhmikosr@gmail.com>

Signed-off-by: DL6ER <dl6er@dl6er.de>

…3521)

#3501)

Remove superfluosus ettings-level-expert class Signed-off-by: yubiuser <github@yubiuser.dev>

Signed-off-by: XhmikosR <xhmikosr@gmail.com>

Bumps [postcss](https://github.com/postcss/postcss) from 8.5.5 to 8.5.6. - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.5...8.5.6) --- updated-dependencies: - dependency-name: postcss dependency-version: 8.5.6 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: yubiuser <github@yubiuser.dev>

Signed-off-by: RD WebDesign <github@rdwebdesign.com.br>

Signed-off-by: yubiuser <github@yubiuser.dev>

Bumps [editorconfig-checker/action-editorconfig-checker](https://github.com/editorconfig-checker/action-editorconfig-checker) from f40bac9e7d9e7d298fbe36b83e1eff8f0de13fb8 to 1a41284d59c6fe7f1b21ddc4a2b36400a33dc1b4. - [Release notes](https://github.com/editorconfig-checker/action-editorconfig-checker/releases) - [Commits](editorconfig-checker/action-editorconfig-checker@f40bac9...1a41284) --- updated-dependencies: - dependency-name: editorconfig-checker/action-editorconfig-checker dependency-version: 1a41284d59c6fe7f1b21ddc4a2b36400a33dc1b4 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.30.6 to 4.30.8. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@64d10c1...f443b60) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.30.8 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [xo](https://github.com/xojs/xo) from 1.2.2 to 1.2.3. - [Release notes](https://github.com/xojs/xo/releases) - [Commits](xojs/xo@v1.2.2...v1.2.3) --- updated-dependencies: - dependency-name: xo dependency-version: 1.2.3 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

…om f40bac9e7d9e7d298fbe36b83e1eff8f0de13fb8 to 1a41284d59c6fe7f1b21ddc4a2b36400a33dc1b4 (#3625)

…3624)

Signed-off-by: Jonathan Prusik <jprusik@classynemesis.com>

Signed-off-by: yubiuser <github@yubiuser.dev>

Bumps [actions/setup-node](https://github.com/actions/setup-node) from 5.0.0 to 6.0.0. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@a0853c2...2028fbc) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [editorconfig-checker/action-editorconfig-checker](https://github.com/editorconfig-checker/action-editorconfig-checker) from 1a41284d59c6fe7f1b21ddc4a2b36400a33dc1b4 to 5ecdd656fe347c26f76b1b435b90e1d74fb5e787. - [Release notes](https://github.com/editorconfig-checker/action-editorconfig-checker/releases) - [Commits](editorconfig-checker/action-editorconfig-checker@1a41284...5ecdd65) --- updated-dependencies: - dependency-name: editorconfig-checker/action-editorconfig-checker dependency-version: 5ecdd656fe347c26f76b1b435b90e1d74fb5e787 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.30.8 to 4.30.9. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@f443b60...16140ae) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.30.9 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [eslint](https://github.com/eslint/eslint) from 9.37.0 to 9.38.0. - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v9.37.0...v9.38.0) --- updated-dependencies: - dependency-name: eslint dependency-version: 9.38.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

…om 1a41284d59c6fe7f1b21ddc4a2b36400a33dc1b4 to 5ecdd656fe347c26f76b1b435b90e1d74fb5e787 (#3633)

The information from `mg.request_info.request_uri` depends on the URL typed by the user. This information was used without any sanitization, allowing an attacker to send crafted links containing anything, including javascript code, which could be loaded and executed in a few pages. Replacing this value with `scriptname` variable fixes the issue, since this variable contains the name of the file currently being executed. This information cannot be externally manipulated and it is safe to be used on the page. Signed-off-by: RD WebDesign <github@rdwebdesign.com.br>

This page is currently not used because we redirect to login page in case of unauthenticated access, but I'm removing it just in case we decide to change how we handle 403 errors in the future. Signed-off-by: RD WebDesign <github@rdwebdesign.com.br>

Replace `mg.request_info.request_uri` with the variable `scriptname`

HTML escape adlist URL and non-domain entried before printing it in gravity stream

dependabot Bot and others added 30 commits May 30, 2025 21:58

header_authenticated.lp: add the hostname li only if it's greater t…

f78257b

…han zero Signed-off-by: XhmikosR <xhmikosr@gmail.com>

footer: use text for sysinfo-cpu

b3e8e40

There's no HTML involved. Signed-off-by: XhmikosR <xhmikosr@gmail.com>

footer: use text for sysinfo-cpu (#3502)

96cbbce

Remove superfluosus ettings-level-expert class

1eb64c3

Signed-off-by: yubiuser <github@yubiuser.dev>

build(deps): bump github/codeql-action from 3.28.18 to 3.28.19 (#3507)

b81422f

build(deps-dev): bump postcss from 8.5.3 to 8.5.4 (#3498)

607a42a

Sync master back into development (#3496)

6ae6222

build(deps-dev): bump postcss from 8.5.4 to 8.5.5 (#3512)

f61710a

build(deps): bump github/codeql-action from 3.28.19 to 3.29.0 (#3510)

9f2ffec

header: don't hide advanced info since it's always shown

293a844

Signed-off-by: XhmikosR <xhmikosr@gmail.com>

Lowercase doctype

3d7f0d4

It's perfectly valid and it should result in smaller compressed size when gzip is used. Signed-off-by: XhmikosR <xhmikosr@gmail.com>

Lowercase doctype (#3515)

c205e23

Fix a few HTML validation issues

8529cb0

Signed-off-by: XhmikosR <xhmikosr@gmail.com>

header: don't hide advanced info since it's always shown (#3513)

538020e

Fix a few HTML validation issues (#3517)

b979fff

footer: remove document.hidden in checkBlocking (#3518)

aaa692d

This is taken care of in utils.setTimer. Fixes status not showing when opening a new tab. Previously, it was shown after the timer fired. Signed-off-by: XhmikosR <xhmikosr@gmail.com>

Clarify client description priorities on the groups/client interface

1d93f5d

Signed-off-by: DL6ER <dl6er@dl6er.de>

Clarify client description priorities on the groups/client interface (#…

20ddeb8

…3521)

header_authenticated.lp: add the hostname li only if it's greater t… (

a07daca

#3501)

Remove superfluous settings-level-expert class (#3503)

30ff1cd

Remove superfluosus ettings-level-expert class Signed-off-by: yubiuser <github@yubiuser.dev>

settings-dns: expand custom servers box if it has custom servers

65e2917

Signed-off-by: XhmikosR <xhmikosr@gmail.com>

Abstract collapsing box to a new util

5efe33b

Signed-off-by: XhmikosR <xhmikosr@gmail.com>

groups-clients.lp: fix invalid HTML

3dd02a9

Signed-off-by: XhmikosR <xhmikosr@gmail.com>

groups-clients.lp: fix invalid HTML (#3522)

3cbe3c3

yubiuser changed the title ~~vNext~~ Pi-hole Web v6.3 Oct 5, 2025

yubiuser added the Release label Oct 5, 2025

yubiuser and others added 26 commits October 6, 2025 21:18

Update FTL %cpu and %mem everytime total CPU stats are updated

4f11435

Signed-off-by: yubiuser <github@yubiuser.dev>

Add CPU usage percentage to the Load tooltip

507fde4

Signed-off-by: RD WebDesign <github@rdwebdesign.com.br>

Update FTL %cpu and %mem everytime total CPU stats are updated (#3622)

68e8675

Clarify uptime in container matching the host uptime with a tooltip

bc68150

Signed-off-by: yubiuser <github@yubiuser.dev>

build(deps): bump editorconfig-checker/action-editorconfig-checker fr…

5abbfef

…om f40bac9e7d9e7d298fbe36b83e1eff8f0de13fb8 to 1a41284d59c6fe7f1b21ddc4a2b36400a33dc1b4 (#3625)

build(deps): bump github/codeql-action from 3.30.6 to 4.30.8 (#3626)

0db2370

build(deps-dev): bump xo from 1.2.2 to 1.2.3 (#3628)

2aac0f4

Clarify uptime in container matching the host uptime with a tooltip (#…

b8fce4d

…3624)

Adjust BitWarden to Bitwarden

d4441bd

Signed-off-by: Jonathan Prusik <jprusik@classynemesis.com>

Adjust text BitWarden to Bitwarden (#3629)

4fa8b2e

Escape all lines to also prevent XSS for non-domain entries

febc2b8

Signed-off-by: yubiuser <github@yubiuser.dev>

build(deps): bump actions/setup-node from 5.0.0 to 6.0.0 (#3632)

142b27c

build(deps): bump editorconfig-checker/action-editorconfig-checker fr…

020a202

…om 1a41284d59c6fe7f1b21ddc4a2b36400a33dc1b4 to 5ecdd656fe347c26f76b1b435b90e1d74fb5e787 (#3633)

build(deps): bump github/codeql-action from 4.30.8 to 4.30.9 (#3634)

814c556

build(deps-dev): bump eslint from 9.37.0 to 9.38.0 (#3635)

da80339

Merge commit from fork

4d39206

Replace `mg.request_info.request_uri` with the variable `scriptname`

Merge commit from fork

4159aaa

HTML escape adlist URL and non-domain entried before printing it in gravity stream

DL6ER approved these changes Oct 25, 2025

View reviewed changes

PromoFaux merged commit 62c55dc into master Oct 25, 2025
15 checks passed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Pi-hole Web v6.3#3594

Pi-hole Web v6.3#3594
PromoFaux merged 190 commits intomasterfrom
development

PromoFaux commented Aug 27, 2025 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

12 participants

Uh oh!

Conversation

PromoFaux commented Aug 27, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

What's Changed

New Contributors

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

12 participants

PromoFaux commented Aug 27, 2025 •

edited

Loading