Suggested by: @fabianfrz

At least FortiGate doesn't like meshing the phase 2 entries so
instead isolete each phase 2 entry in its own tunnel.  This is
supposedly IKEv1 trickery, but it works...

Also see: https://wiki.strongswan.org/projects/strongswan/wiki/FAQ#Multiple-subnets-per-SA
Also see: https://lists.strongswan.org/pipermail/users/2013-March/004478.html

This reverts commit f85e688c.

Filter URL Only at HTTPS Filter

Prodded by: @fabianfrz

This is especially useful for "sudo su" in manually created admins
to gain access to the console menu without compromising the root
password.

Needs more fixing/unification with the proper way of doing it,
but for now let these strings trickle through the translation
machinery for maximum effect.

We don't have to do anything here anymore.  Since we started using
pkg(8) the extensions.ini was always consistent, but we needed to
make sure that the order is correct.  Some more cleverness was added
to no prevent other PHP modules from simply "plugging in", but since
they are not in one extensions.ini anymore it won't matter.

Expecting some splatter during upgrade, but hopefully also no more
php-suhosin clashes with php56-session not loaded.  :)

(services_dnsmasq.php) colspan not compatible with mobile/opnsense_standard_table_form, closes https://github.com/opnsense/core/issues/1142

Suggested by: @Antonio-Prado

Suggested by: @DokuKaefer

Suggested by: @Antonio-Prado

(proxy) add constraint on filename for remoteacl, closes https://github.com/opnsense/core/issues/700

Whitelisting in Suhosin is needed to make this work, but
unfortunately this will disable whitelisting for all of
phar.  A pretty debatable design choice, but for now we
keep this on -devel until we know what to do...

Constraints hook into the default validations, new constraints should derive from BaseConstraint.
This commit contains the code needed to add constraints to our model and a unittest for the UniqueConstraint option.

Add the following to a model field, to force uniqueness for a combination of keys:

<Constraints>
  <check001>                                                 <!--validation name, unique within this field-->
    <message>number should be unique</message>               <!--the message to output on validation failure -->
    <type>OPNsense\Base\Constraints\UniqueConstraint</type>  <!--the class to construct, derived from OPNsense\Base\Constraints\BaseConstraint -->
    <addFields>                                              <!--optional additional fields for the equation, defined in UniqueConstraint -->
       <field1>optfield</field1>
    </addFields>
  </check001>
</Constraints>

If there is not enough space in /tmp, it's really nothing we
can do about here.  This is not an essential file.