summaryrefslogtreecommitdiff
path: root/lib
Commit message (Collapse)AuthorAge
* Merge pull request #1022 from cdwertmann/patch-1Andreas Gohr2015-03-19
|\ | | | | indexer.php: slow page loads on lighttpd due to missing ob_flush()
| * Speed up indexer on lighttpd by using tpl_flush()Christoph Dwertmann2015-03-17
| |
| * Add ob_flush() to sendGIFChristoph Dwertmann2015-02-05
| | | | | | | | | | | | | | I'm running this dokuwiki docker container: https://registry.hub.docker.com/u/mprasil/dokuwiki/ It uses lighttpd and fastcgi. For some reason, the ignore_user_abort() feature where the browser should close the connection after the GIF has been received is not working on lighty. The browser keeps loading the page until the indexer run is complete, which leads to extremely slow load times with a larger page index. Adding ob_flush() to sendGIF fixes the issue.
* | SECURITY escape user properties in user manager #1081Andreas Gohr2015-03-18
| | | | | | | | | | | | | | | | | | The user properties (login, real name, etc) where not properly escaped in the user manager's edit form. This allowed a XSS attack on the superuser by registered users. Thanks to Filippo Cavallarin from www.segment.technology for discovering this bug.
* | translation updateJacob Palm2015-03-17
| |
* | Merge pull request #1073 from sklrrzn/masterAndreas Gohr2015-03-16
|\ \ | | | | | | Add two config options to authldap
| * | Add english description for new authldap optionsSascha Klopp2015-03-16
| | |
| * | Add description for modPass-OptionSascha Klopp2015-03-13
| | |
| * | Two new authldap config options: 'userkey' denotes the LDAPSascha Klopp2015-03-03
| | | | | | | | | | | | | | | attribute holding the username, 'modPass' allows to disable password changing by the user.
* | | Merge pull request #1070 from micgro42/authadGetUserCountAndreas Gohr2015-03-16
|\ \ \ | | | | | | | | Get total number of users in ad, needed for paging
| * | | Escape user strings given to adLDAPMichael Große2015-03-12
| | | |
| * | | Explain functions in docstringsMichael Große2015-03-12
| | | |
| * | | Clean up code, add phpdoc comments, some refactoring, etc.Michael Große2015-03-12
| | | |
| * | | Disable the ``last`` button when filtering groupsMichael Große2015-03-12
| | | | | | | | | | | | | | | | | | | | | | | | Since we cannot effectively filter for groups and have to work with incremental prefetching, the ``last`` button is mostly broken/buggy. Hence it is disabled in this usecase.
| * | | When filtering for group implement prefetchingMichael Große2015-03-12
| | | |
| * | | Create and use ad search for user, name and emailMichael Große2015-03-12
| | | |
| * | | Get total number of users in ad, needed for pagingMichael Große2015-03-11
| | | |
* | | | send JavaScript with correct mimetypeAndreas Gohr2015-03-03
| |/ / |/| | | | | | | | | | | | | | | | | | | | | | | While Browsers (IE of course) still fail to accept the correct application/javascript mimetype in the type attribute of the script element, we should serve the scripts with the correct Content-Type header at least. This is especially important as the default configuration of mod_deflate expects application/javascript and will not compress text/javascript.
* | | Merge pull request #1053 from splitbrain/pageidmobileAndreas Gohr2015-02-25
|\ \ \ | |/ / |/| | simple fix for pageID clash with sidebar in mobile view
| * | remove additional sidebar bottom margin in phone modeAndreas Gohr2015-02-25
| | |
| * | simple fix for pageID clash with sidebar in mobile viewAndreas Gohr2015-02-24
| | | | | | | | | | | | | | | Since the pageid is no longer positioned absolute it clashed with the sidebar since #1027. this introduces a very simplisitc fix.
* | | translation updateSchplurtz le Déboulonné2015-02-24
| | |
* | | check permissions in ACL plugin's RPC API component. #1056Andreas Gohr2015-02-24
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Security Fix Severity: Medium Type: Remote Priviledge Escalation Remote: yes Vulnerability Details: This fixes a security hole in the ACL plugins remote API component. The plugin failed to check for superuser permissions before executing ACL addition or deletion. This means everybody with permissions to call the XMLRPC API also had permissions to set up their own ACL rules and thus circumventing any existing rules. Risk Assessment: The XMLRPC API in DokuWiki is marked experimental and off by default. It also implements an additional safeguard by giving access to a configured circle of users and groups only. So only a minor number of DokuWiki installations will be affected at all. For affected installations the risk is high if users with access to the API are not to be trusted. Thus the overall severity of medium. Resolution: Installations applying this commit are safe. A hotfix is about to be released. Meanwhile users are advised to disable the XMLRPC API in the config manager.
* | Merge pull request #1027 from splitbrain/issue-1011Andreas Gohr2015-02-24
|\ \ | | | | | | avoid messages pushing down page tools. fixes #1011
| * | fixed the margin for the sidebarAndreas Gohr2015-02-24
| | |
| * | avoid messages pushing down page tools. fixes #1011Andreas Gohr2015-02-09
| | | | | | | | | | | | | | | This moves the message area into content div. The pageid is now aligned by floating instead of absolute positioning.
* | | add bottom margin to tables in print. fixes #1052Andreas Gohr2015-02-24
| | |
* | | translation updateÁlvaro Iradier2015-02-13
| | |
* | | Merge pull request #497 from mprins/semantic_you_are_hereAndreas Gohr2015-02-12
|\ \ \ | | | | | | | | use nav+ul element for "you are here" as recommended by W3C spec
| * | | use nav+ul element for "you are here"Mark2014-12-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | As described in the common idioms of the HTML5 spec, mark up navigation as a list inside a `nav` element for better semantics and accessibility. see: * http://www.w3.org/html/wg/drafts/html/master/common-idioms.html#rel-up * http://lists.w3.org/Archives/Public/public-html/2013Nov/thread.html#msg6 * https://dl.dropboxusercontent.com/u/377471/breadcrumb.html for discussion and background.
* | | | Added icon for interwiki.confTim2222015-02-12
| | | | | | | | | | | | | | | | Support for the URI scheme tel: #643
* | | | translation updatelainme2015-02-12
| | | |
* | | | Merge pull request #1013 from dokuwiki-translate/lang_update_168Andreas Gohr2015-02-09
|\ \ \ \ | |_|/ / |/| | | Translation update (ru)
| * | | translation updateAleksandr Selivanov2015-01-25
| | | |
* | | | fix referral settings in AuthLDAP. closes #1023Andreas Gohr2015-02-09
| | | |
* | | | fixed method signature #1024Andreas Gohr2015-02-09
| |_|/ |/| |
* | | translation updateDavor Turkalj2015-01-28
|/ /
* | fixed wrong config check in extension manager #1006Andreas Gohr2015-01-15
| |
* | Losslessly reduced PNG images with optipng -o7 -strip all, advdef -z4 -i60, ↵KeenRivals2015-01-14
| | | | | | | | and advpng -z4 -i60.
* | Update css.phpRainbow Spike2015-01-12
| | | | | | 1 little fix
* | Scrutinizer Auto-FixesScrutinizer Auto-Fixer2015-01-10
| | | | | | | | This commit consists of patches automatically generated for this project on https://scrutinizer-ci.com
* | translation updateMijndert2015-01-08
| |
* | Merge pull request #927 from cstuder/ctrlenter2submitAndreas Gohr2015-01-08
|\ \ | | | | | | Handles CTRL-Enter event to save in the editor
| * | Handles CTRL-Enter event to save in the editorchristian studer2014-11-12
| | |
* | | Merge pull request #982 from gamma/css.phpAndreas Gohr2015-01-08
|\ \ \ | | | | | | | | Allow arbitrary mediatype names for CSS
| * \ \ Merge branch 'master' into new_css.phpGerry Weißbach2014-12-22
| |\ \ \ | | | |/ | | |/|
| * | | Additionally allow more media typesGerry Weißbach2014-09-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | They are generated from the default ones and any additional one given by the template. This allows to e.g. split admin styles from end user styles in a closed wiki. You can then deliver only the user styles using the metaheaders plugin.
* | | | Scrutinizer Auto-FixesScrutinizer Auto-Fixer2015-01-07
| | | | | | | | | | | | | | | | This commit consists of patches automatically generated for this project on https://scrutinizer-ci.com
* | | | fixed search'and'replace fuckup in config pluginAndreas Gohr2015-01-07
| | | |
* | | | Remove error supression for file_exists()Andreas Gohr2015-01-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | In an older version of PHP a file_exists() call would issue a warning when the file did not exist. This was fixed in later PHP releases. Since we require PHP 5.3 now, there's no need to supress any error here anymore. This might even give a minor performance boost.
generated by cgit v1.2.3 (git 2.25.1) at 2025-05-10 22:55:42 +0000