Escape the individual dnsmasq advanced/custom options
Encode the detail field of an alias entry before displaying its contents back to the user.
Encode interface/VIP descriptions before displaying them on the GRE and GIF pages also;
While here, the GRE page was missing IP aliases from its list of bind IPs, add it in.
Encode interface/VIP descriptions before displaying them on the NTP daemon settings.
Per the dhcpd.conf man page and other documentation from ISC, mclt must not be defined on the secondary.
Move the rekey to yes always to avoid issues.
Change the logic of the vpn config generation to make connectivity more stable especially ipsec. Also for IKEv1 just generate the policies and only on traffic start them.
Do a reload on the cofniguration which is better than update. Also let the keyingtries to 3 rather than forever to avoid problems on recovery.
Shorten the wait at "reload" in startup wizard to 5 seconds from 60. That's more than adequate for current systems, no need to make people sit there for 1 minute. Many likely click out via the logo and miss the last screen entirely.
Correct this so the dpdaction is created properly as restart
Do not execute DNS resolution on GET, only pre-fill Host box so the user can press the button to execute. Turn alias creation links into submit buttons for POST. While here, remove some backticks and simplify a little.