| Commit message (Collapse) | Author | Age |
| |
|
| |
|
|\
| |
| | |
Translation update (fr)
|
|/ |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Security Fix
Severity: Medium
Type: Remote Priviledge Escalation
Remote: yes
Vulnerability Details:
This fixes a security hole in the ACL plugins remote API component. The
plugin failed to check for superuser permissions before executing ACL
addition or deletion. This means everybody with permissions to call the
XMLRPC API also had permissions to set up their own ACL rules and thus
circumventing any existing rules.
Risk Assessment:
The XMLRPC API in DokuWiki is marked experimental and off by default. It
also implements an additional safeguard by giving access to a configured
circle of users and groups only. So only a minor number of DokuWiki
installations will be affected at all.
For affected installations the risk is high if users with access to the
API are not to be trusted.
Thus the overall severity of medium.
Resolution:
Installations applying this commit are safe. A hotfix is about to be
released. Meanwhile users are advised to disable the XMLRPC API in the
config manager.
|
|\
| |
| | |
avoid messages pushing down page tools. fixes #1011
|
| | |
|
| |
| |
| |
| |
| | |
This moves the message area into content div. The pageid is now aligned
by floating instead of absolute positioning.
|
| | |
|
|\ \
| | |
| | | |
Add missing tbody to renderer
|
| | | |
|
|\ \ \
| | | |
| | | | |
Normalization is required to manage multibyte characters.
|
| | | | |
|
| |/ /
| | |
| | |
| | |
| | |
| | |
| | | |
The OSX uses Unicode-NFD so normalization is required to manage multibyte characters.
( http://unicode.org/reports/tr15/ )
If don't do that, DokuWiki can't find the file uploaded from OS X with multibyte filename like '도쿠위키.jpg'
|
|\ \ \
| |/ /
|/| | |
New event: HTML_SHOWREV_OUTPUT
|
| | | |
|
| | | |
|
| |\ \
| |/ /
|/| | |
|
|\ \ \
| | | |
| | | | |
Update template.php
|
|/ / /
| | |
| | | |
Added placeholder in search textarea
|
|\ \ \
| | | |
| | | | |
Update wordblock.conf
|
| | | |
| | | |
| | | | |
moved those keywords to http & added penis
|
| | | | |
|
| | | |
| | | |
| | | | |
wordblock.conf too restrictive #1021 - removed fetish, bi...sex & gay...sex
|
|\ \ \ \
| | | | |
| | | | | |
Translation update (es)
|
|/ / / / |
|
|\ \ \ \
| | | | |
| | | | | |
use nav+ul element for "you are here" as recommended by W3C spec
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
As described in the common idioms of the HTML5 spec, mark up navigation as a list inside a `nav` element for better semantics and accessibility.
see:
* http://www.w3.org/html/wg/drafts/html/master/common-idioms.html#rel-up
* http://lists.w3.org/Archives/Public/public-html/2013Nov/thread.html#msg6
* https://dl.dropboxusercontent.com/u/377471/breadcrumb.html
for discussion and background.
|
|\ \ \ \ \
| |_|/ / /
|/| | | | |
Update interwiki.conf
|
| | | | |
| | | | |
| | | | |
| | | | | |
Support for the URI scheme tel: #643
|
|/ / / /
| | | |
| | | | |
Support for the URI scheme tel: #643
|
|\ \ \ \
| | | | |
| | | | | |
Translation update (zh)
|
|/ / / / |
|
|\ \ \ \
| | | | |
| | | | | |
Send CRLF to Windows UAs for code blocks #863
|
| | | | | |
|
|\ \ \ \ \
| | | | | |
| | | | | | |
consistency: failure exit with status code 1
|
|/ / / / / |
|
|\ \ \ \ \
| |_|_|_|/
|/| | | | |
Translation update (ru)
|
| | | | | |
|
| | | | | |
|
| | | | | |
|
| | | | | |
|
| | | | | |
|
|\ \ \ \ \
| |/ / / /
|/| | | | |
Translation update (hr)
|
|/ / / / |
|
|\ \ \ \
| | | | |
| | | | | |
"Login" and "Logout" become "Log In" and "Log Out"
|
|/ / / /
| | | |
| | | | |
This change improves consistency with neighboring links such as "Update Profile" and "Register", which are two action verbs. "Login" and "Logout" were nouns and not verbs. Title case capitalization is applied because of "Update Profile".
|
|\ \ \ \
| | | | |
| | | | | |
"Recent changes" becomes "Recent Changes"
|
| | | | |
| | | | |
| | | | | |
To improve consistency: it is surrounded by "Update Profile" and "Media Manager".
|
| | | | | |
|