UnivNautes

Allow HASH algorithms to be empty for phase2 in case the encryption one is AES-GCM

Ensure this is always an array to avoid a PHP error from foreach.

Do not reset source and destination port range values when it's an associated rule created by nat port forward. It fixes #3778

Require click-through POST confirmation when restoring or deleting a configuation from the backup history page.

Do not execute DNS resolution on GET, only pre-fill Host box so the user can press the button to execute. Turn alias creation links into submit buttons for POST. While here, remove some backticks and simplify a little.

Shorten the wait at "reload" in startup wizard to 5 seconds from 60. That's more than adequate for current systems, no need to make people sit there for 1 minute. Many likely click out via the logo and miss the last screen entirely.

Change the logic of the vpn config generation to make connectivity more stable especially ipsec. Also for IKEv1 just generate the policies and only on traffic start them.

Encode interface/VIP descriptions before displaying them on the NTP daemon settings.

Encode interface/VIP descriptions before displaying them on the GRE and GIF pages also;
While here, the GRE page was missing IP aliases from its list of bind IPs, add it in.

Encode the detail field of an alias entry before displaying its contents back to the user.