yaml is picky about square brackets

do not try to disable functions on hhvm

this is not supported, yet: https://github.com/facebook/hhvm/issues/2745

updated geshi

do not static cache useheading during tests

This took me way to long to figure out. The useheading setting was
cached in a static variable which is fine usually as it doesn't change
during a single

do not static cache useheading during tests

This took me way to long to figure out. The useheading setting was
cached in a static variable which is fine usually as it doesn't change
during a single request. But in testing we want to change it often.

show more ...

fix problems with header that look falsy. fixes #1770

load jquery via https always

split off jquery from other JS and add CDN option #1766

jQuery (and UI and Migrate) are now loaded separately from the rest of
the JavaScript. This adds at least one HTTP request more but has some
a

split off jquery from other JS and add CDN option #1766

jQuery (and UI and Migrate) are now loaded separately from the rest of
the JavaScript. This adds at least one HTTP request more but has some
advantages:

* browsers can cache it independently
* the cache is only invalidated when versions update
* we do not apply any transformations (replacements, minimizing, etc) on
this code anymore which makes our dispatcher faster for the other JS
* browsers seem to load (not execut) both (jquery and other) parallel,
which might increase download speed a bit

This split allowed for the introduction of a new config: jquerycdn. When
enabled the 3 jquery files are loaded from jQueries CDN. This adds
another two HTTP requests but:

* since it's another host those files do not apply to the 4 request per
host limit and can be loaded (not executed) in paralell which might
increase download speeds a bit
* the CDN is distributed worldwide which means files are requested from
the closest location, increasing the download speeds
* since these files/CDN are very popular, chances are high that people
already have them cached in their browsers, reducing the download time
to 0 and effectiely halving the javascript needed to download

The option currently defaults to 'off', but I would argue 'on' would be
the better default.

show more ...

use external version file for jquery updates

this also removes the non inified versions and incorporates some updates
the jquery CDN just pushed for jquery-ui

removed jQuery.browser calls

jQuery.browser no longer exists in jQuery nor in jQuery migrate. A quick
check in Opera and IE11 suggests that both parts that used it are no
longer needed so they were

removed jQuery.browser calls

jQuery.browser no longer exists in jQuery nor in jQuery migrate. A quick
check in Opera and IE11 suggests that both parts that used it are no
longer needed so they were simply removed.

More browser tests especially for the resize handling in the media manager
are recommended.

show more ...

replace deprecated bind() calls

The bind() call is deprecated in jQuery 3. This replaces it with
the on() call.

replace deprecated delegate() calls

The delegate() call is deprecated in jQuery 3. This replaces it with the
on() call.

fixed radio options in media manager for new jQ-UI

jQuery UI replaced the buttonset widget with a controlgroup widget. This
adjusts the JavaScript and styling accordingly.

jQuery Updates

- jQuery to 3.1.1
- jQuery UI to 1.12.1
- jQuery Migrate to 3.0.0

There are a few warnigs from migrate that have to be fixed. The toggles
in the Media Manager are also missing their

jQuery Updates

- jQuery to 3.1.1
- jQuery UI to 1.12.1
- jQuery Migrate to 3.0.0

There are a few warnigs from migrate that have to be fixed. The toggles
in the Media Manager are also missing their proper icons.

show more ...

authpdo - use type safe comparison on passwords. fixes #1765

removed unneeded files from random_compat

Use cryptographically secure pseudo random number generator (CSPRNG)

Uses paragonie/random_compat instead of insecure home-brewed code.

It's NEVER fine to fall back to mt_rand() for secure random.

Use cryptographically secure pseudo random number generator (CSPRNG)

Uses paragonie/random_compat instead of insecure home-brewed code.

It's NEVER fine to fall back to mt_rand() for secure random.

Fixes #1760.

show more ...

translation update

translation update

translation update

translation update

translation update

or maybe I only now figured out the right travis config :-/

disable 7.1 testing completely

currently phpseclib throws an error (about a deprecated function).
errors do not count as failures, so we can't skip them. so for now
7.1 testing is removed again.

allow 7.1 failures until it's released #1682

DE translation for key 'protected'