UnivNautes

Encode the detail field of an alias entry before displaying its contents back to the user.

Escape the individual dnsmasq advanced/custom options

Fix input validation logic on diag_testport.php, escape more shell arguments for good measure

Allow hostnames in bulk import since they are valid entries in a network type alias.

Change Cancel button to call history.back() as done in Firewall Rules, the current method has issues with IE 11, it should fix #3728

Fix #3725:

- Fix match_filter_field() and also simplify logic
- Fix $filterfieldsarray initialization
- Avoid to have double spaces on filterfieldsarray['act']
- Fix filter on Firewall Logs

Merge pull request #1208 from razzfazz/nat_add_missing_protocols

Remove also . and / from graph

Fix status_rrd_graph_img.php and also improve it:

- Remove escapeshellarg that broke command line
- Only remove dangerous chars to avoid command injection
- Replace all `hostname` calls by php_uname('n')
- Replace all `date` calls by strftime()
- Add $_gb to collect possibly garbage from exec return

Make sure single quotes are encoded and avoid javascript injection