| Commit message (Collapse) | Author | Age |
... | |
| |
|
|
|
|
|
|
|
| |
It seems, some servers require a special Status: header for sending the
HTTP status code from PHP (F)CGI to the server. This patch introduces a
new function (adopted from CodeIgniter) for simplifying the status
handling.
|
| |
|
|
|
|
|
|
|
| |
This changes the previously static lastsecid into an instance variable,
this leads to consistent section edit ids when the xhtml renderer is
used more than once in a request. This makes it possible for test cases
to know the exact section edit id for an instruction array.
|
| |
|
|\
| |
| | |
fix E_STRICT errors FS#2427
|
| |
| |
| |
| |
| |
| |
| |
| | |
This commit fixes all E_STRICT messages shown when running the test
suite. There might be more problems not covered by tests, yet.
For compatibility reasons with plugins, E_STRICT errors are still
supressed.
|
|/ |
|
|
|
|
| |
In p_render() it is assumed that all renderers have a $doc variable
|
| |
|
| |
|
| |
|
| |
|
|\
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
pull-request-110
* 'input-validation' of git://github.com/whoopdedo/dokuwiki:
fix incorrect usage of tpl_getMediaFile
fix necessary global declaration
Input wrapper for html forms
Input validation for media manager
Input wrapper for exe scripts
more INPUT wrapper uses: cache purge, sectok, getID
Input wrapper for action.php
Conflicts:
lib/exe/css.php
|
| | |
|
| | |
|
| | |
|
| |
| |
| |
| | |
can someone with better regex skills please revise this?
|
| | |
|
|/ |
|
|\
| |
| | |
Parser: Allow parser to fully recognize windows share links with a hyphen character in it
|
| |
| |
| |
| |
| |
| | |
character in it
(Currently, the clickable link stops before a hyphen character)
|
|\ \
| |/
|/| |
Rework for 2 missing commits
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
|/ |
|
|
|
|
|
| |
unset does not reset the Array's internal pointer which messes up later
calls. array_pop is still much faster than array_splice
|
| |
|
| |
|
|
|
|
| |
Looks like a for loop is faster than array_splice
|
|
|
|
| |
The file contained a few DOS lineendings and trailing spaces
|
| |
|
|
|
|
|
| |
This reverts commit 1ca2719c7488662ebd7964c0d026e0890f923ee9 as it is
now superseeded by a6b82e436e3d68a42a6556165d6aaf9249db44cd
|
|
|
|
|
|
|
|
|
|
|
| |
This fixes a problem where JavaScript could be introduced through
specially crafted RSS feeds on a lower level than the commit from
yesterday (1ca2719c7488662ebd7964c0d026e0890f923ee9)
This also fixes a problem where JavaScript links could be introduced by
specifying it as an RSS URL: the resulting error message displays a
link to the broken feed URL. This patch makes sure there's no working
link for unknown protocols.
|
|
|
|
|
| |
This fixes a security vulnerability where an attacker could introduce
JavaScript links into wiki pages by including a prepared RSS feed.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This changes the cache logic for metadata. It introduces a new mode that
tries to avoid rendering the page again for simple requests but still
updates the metadata when the page has been changed (but not when the
cache timeout has been reached or purge is used). It simply compares the
time of the last rendering with the last modified time of the page.
The old boolean $render parameter has been changed into an int with
three possible values. Compatibility for the old parameter is provided
using a check with is_numeric using the following mapping:
- false is still don't render (0 is the new value for that)
- true is using that new render logic which means that many plugins will
still work unchanged even if they request a lot of data using
$render=true (1 is the new value for that providing full compatibility
in the case 1 has been used instead of true)
The default value for p_get_first_heading is now that new simple cache
logic, the default value for getting metadata is the cache logic which
should be used with care but is the only way to request (rendered)
metadata that can change because of plugin installations or upgrades.
|
| |
|
| |
|
|
|
|
|
| |
This fixes a PCRE backtrack error that occurred on large pages like
:users on dokuwiki.org.
|
|\ |
|
| |\ |
|
| | |
| | |
| | |
| | |
| | |
| | | |
-Simplify the algorithm. May improve performance.
-Treat footnote as pure block and section as pure stack.
-Remove post-p-open and pre-p-close linefeeds. Affects the effect of xbr plugin.
|
| | |
| | |
| | |
| | | |
starting single linebreaks.
|
| |\| |
|
| | | |
|
| | |
| | |
| | |
| | |
| | |
| | | |
prevents plugins that ought to handle headers from working and require a lot of ugly workarounds (such as header2).
If there's a concern, "protected" may be another choice.
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Anika's merge did not pul in the individual patches as one would expect.
Then I messed up when trying to fix this by merging with danny's repo
again but used the wrong branch. So we're still missing two patches. To
have them apply cleanly I have to revert Anika's merge here. Another
merge for the missing two patches will follow.
This reverts commit b17e20ac9cca30b612968d02f06fa9c5df5c01f0.
|