the backend (cgi files) of the web UI is not open source so there is only binary.
If you compile your own firmware, it is supposed to be clean.