summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
* translation updateसरोज ढकाल2015-03-24
|
* Merge pull request #1022 from cdwertmann/patch-1Andreas Gohr2015-03-19
|\ | | | | indexer.php: slow page loads on lighttpd due to missing ob_flush()
| * Speed up indexer on lighttpd by using tpl_flush()Christoph Dwertmann2015-03-17
| |
| * Add ob_flush() to sendGIFChristoph Dwertmann2015-02-05
| | | | | | | | | | | | | | I'm running this dokuwiki docker container: https://registry.hub.docker.com/u/mprasil/dokuwiki/ It uses lighttpd and fastcgi. For some reason, the ignore_user_abort() feature where the browser should close the connection after the GIF has been received is not working on lighty. The browser keeps loading the page until the indexer run is complete, which leads to extremely slow load times with a larger page index. Adding ob_flush() to sendGIF fixes the issue.
* | corrupted the gz test file moreAndreas Gohr2015-03-18
| | | | | | | | | | | | it seems that different zlib versions behave different with corrupted files. Some return false, some return whatever they still can read from the file. the file now should no longer be readable by any version.
* | SECURITY escape user properties in user manager #1081Andreas Gohr2015-03-18
| | | | | | | | | | | | | | | | | | The user properties (login, real name, etc) where not properly escaped in the user manager's edit form. This allowed a XSS attack on the superuser by registered users. Thanks to Filippo Cavallarin from www.segment.technology for discovering this bug.
* | fixed HTTPS proxy tests, our tests now run on httpbin.orgAndreas Gohr2015-03-18
| | | | | | | | | | This also reverses the order of crypto protocols tried again. Using TLS first again. related to #915
* | correct error checking for bz2 file readingAndreas Gohr2015-03-18
| | | | | | | | | | | | | | | | | | The code reading .bz2 compressed files did not correctly check for possible read errors. In case of a corrupted file this could have led to an infinite loop. Thanks to Filippo Cavallarin from www.segment.technology for dicovering this bug.
* | Merge pull request #1079 from dokuwiki-translate/lang_update_18Andreas Gohr2015-03-18
|\ \ | | | | | | Translation update (he)
| * | translation updateitsho2015-03-18
|/ /
* | give better error message in HTTPClient for failed crypto setupAndreas Gohr2015-03-18
| |
* | Merge pull request #1078 from dokuwiki-translate/lang_update_14Andreas Gohr2015-03-17
|\ \ | | | | | | Translation update (da)
| * | translation updateJacob Palm2015-03-17
|/ /
* | use correct host in proxy testsAndreas Gohr2015-03-16
| |
* | Merge pull request #1073 from sklrrzn/masterAndreas Gohr2015-03-16
|\ \ | | | | | | Add two config options to authldap
| * | Add english description for new authldap optionsSascha Klopp2015-03-16
| | |
| * | Add description for modPass-OptionSascha Klopp2015-03-13
| | |
| * | Two new authldap config options: 'userkey' denotes the LDAPSascha Klopp2015-03-03
| | | | | | | | | | | | | | | attribute holding the username, 'modPass' allows to disable password changing by the user.
* | | Merge pull request #1070 from micgro42/authadGetUserCountAndreas Gohr2015-03-16
|\ \ \ | | | | | | | | Get total number of users in ad, needed for paging
| * | | Escape user strings given to adLDAPMichael Große2015-03-12
| | | |
| * | | Explain functions in docstringsMichael Große2015-03-12
| | | |
| * | | Clean up code, add phpdoc comments, some refactoring, etc.Michael Große2015-03-12
| | | |
| * | | Disable the ``last`` button when filtering groupsMichael Große2015-03-12
| | | | | | | | | | | | | | | | | | | | | | | | Since we cannot effectively filter for groups and have to work with incremental prefetching, the ``last`` button is mostly broken/buggy. Hence it is disabled in this usecase.
| * | | When filtering for group implement prefetchingMichael Große2015-03-12
| | | |
| * | | Create and use ad search for user, name and emailMichael Große2015-03-12
| | | |
| * | | Get total number of users in ad, needed for pagingMichael Große2015-03-11
| | | |
* | | | send JavaScript with correct mimetypeAndreas Gohr2015-03-03
| |/ / |/| | | | | | | | | | | | | | | | | | | | | | | While Browsers (IE of course) still fail to accept the correct application/javascript mimetype in the type attribute of the script element, we should serve the scripts with the correct Content-Type header at least. This is especially important as the default configuration of mod_deflate expects application/javascript and will not compress text/javascript.
* | | Merge pull request #1053 from splitbrain/pageidmobileAndreas Gohr2015-02-25
|\ \ \ | |/ / |/| | simple fix for pageID clash with sidebar in mobile view
| * | remove additional sidebar bottom margin in phone modeAndreas Gohr2015-02-25
| | |
| * | simple fix for pageID clash with sidebar in mobile viewAndreas Gohr2015-02-24
| | | | | | | | | | | | | | | Since the pageid is no longer positioned absolute it clashed with the sidebar since #1027. this introduces a very simplisitc fix.
* | | Merge pull request #1057 from dokuwiki-translate/lang_update_6Andreas Gohr2015-02-25
|\ \ \ | | | | | | | | Translation update (fr)
| * | | translation updateSchplurtz le Déboulonné2015-02-24
|/ / /
* / / check permissions in ACL plugin's RPC API component. #1056Andreas Gohr2015-02-24
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Security Fix Severity: Medium Type: Remote Priviledge Escalation Remote: yes Vulnerability Details: This fixes a security hole in the ACL plugins remote API component. The plugin failed to check for superuser permissions before executing ACL addition or deletion. This means everybody with permissions to call the XMLRPC API also had permissions to set up their own ACL rules and thus circumventing any existing rules. Risk Assessment: The XMLRPC API in DokuWiki is marked experimental and off by default. It also implements an additional safeguard by giving access to a configured circle of users and groups only. So only a minor number of DokuWiki installations will be affected at all. For affected installations the risk is high if users with access to the API are not to be trusted. Thus the overall severity of medium. Resolution: Installations applying this commit are safe. A hotfix is about to be released. Meanwhile users are advised to disable the XMLRPC API in the config manager.
* | Merge pull request #1027 from splitbrain/issue-1011Andreas Gohr2015-02-24
|\ \ | | | | | | avoid messages pushing down page tools. fixes #1011
| * | fixed the margin for the sidebarAndreas Gohr2015-02-24
| | |
| * | avoid messages pushing down page tools. fixes #1011Andreas Gohr2015-02-09
| | | | | | | | | | | | | | | This moves the message area into content div. The pageid is now aligned by floating instead of absolute positioning.
* | | add bottom margin to tables in print. fixes #1052Andreas Gohr2015-02-24
| | |
* | | Merge pull request #1048 from splitbrain/add-tbodyAndreas Gohr2015-02-23
|\ \ \ | | | | | | | | Add missing tbody to renderer
| * | | add missing tabletbody_open|close() to rendererAnika Henke2015-02-19
| | | |
* | | | Merge pull request #1047 from dryoo/patch-1Andreas Gohr2015-02-23
|\ \ \ \ | | | | | | | | | | Normalization is required to manage multibyte characters.
| * | | | Added class-exitstsSC Yoo2015-02-20
| | | | |
| * | | | Normalization is required to manage multibyte characters.SC Yoo2015-02-17
| |/ / / | | | | | | | | | | | | | | | | | | | | | | | | The OSX uses Unicode-NFD so normalization is required to manage multibyte characters. ( http://unicode.org/reports/tr15/ ) If don't do that, DokuWiki can't find the file uploaded from OS X with multibyte filename like '도쿠위키.jpg'
* | | | Merge pull request #1046 from hafron/html_showrev_outputAndreas Gohr2015-02-19
|\ \ \ \ | |/ / / |/| | | New event: HTML_SHOWREV_OUTPUT
| * | | passing rev and date_at to the eventghi2015-02-18
| | | |
| * | | event HTML_SHOWREV_OUTPUTghi2015-02-17
| | | |
| * | | Merge https://github.com/splitbrain/dokuwiki into html_showrev_outputghi2015-02-17
| |\ \ \ | |/ / / |/| | |
* | | | Merge pull request #1043 from Dr-Yukon/patch-1Andreas Gohr2015-02-16
|\ \ \ \ | | | | | | | | | | Update template.php
| * | | | Update template.phpRainbow Spike2015-02-16
|/ / / / | | | | | | | | Added placeholder in search textarea
* | | | Merge pull request #1032 from chang-zhao/patch-1Andreas Gohr2015-02-16
|\ \ \ \ | | | | | | | | | | Update wordblock.conf
| * | | | Update wordblock.confchang-zhao2015-02-13
| | | | | | | | | | | | | | | moved those keywords to http & added penis
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-01 20:25:12 +0000