| Commit message (Collapse) | Author | Age |
|---|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
DokuWiki typically instantiates a plugin once and reuses
that instance whenever the plugin is required. However on
some occasions DokuWiki will request a new instantiation of
a plugin. This particularly applies to render plugins. This
patch allows a plugin to force DokuWiki to reuse the existing
instance.
If a plugin wishes to only be instantiated once then it
should implement an "isSingleton()" method and that
method should return boolean true.
darcs-hash:20090211143520-f07c6-5c1a33dbed55f0b196a204745fe3139f3c7c0aa9.gz
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This patch adds a session based token to all form in the default action plugins.
The validity of the token is checked before any administrative function is
executed aiming to protect DokuWiki's admin functions from Cross-site request
forgery (CSRF) attacks.
Another patch will follow to add the same functionality on other, less critical
functions.
More details on CSRF attacks can be found at
http://en.wikipedia.org/wiki/Cross-site_request_forgery
darcs-hash:20070829201538-7ad00-d0770224a3351fd8e38968e3a9d8e73520482445.gz
|
| |
|
|
| |
darcs-hash:20070323075309-19e2d-ec759de766c1ee42e0145e81bea3946aa9f35298.gz
|
| |
|
|
| |
darcs-hash:20070227122635-20862-e10e801a5224585fa32d8dc3401fd5eb98d70930.gz
|
|
|
darcs-hash:20070119233350-7ad00-a8ae733093693a55c2566f5ee698a7b4aa3a833a.gz
|
