Use str_starts_with/str_ends_with

code style: line breaks

code style: static visibility

Rector to rename print to echo calls

coding style: control flow line breaks

coding style: control flow whitespaces

coding style: function call spacing

codestyle adjustments: class declaration braces

Apply rector renames

fix codesniffer violations

Apply rector fixes to inc/HTTP

use local squid docker instance for proxy testing

HTTPClient: Replace time() method with direct microtime(true) call

Minor fixes in comments

HttpClient::time use microtime(true) directly

use httpbingo for HTPP tests

This service is based on httpbin-go which seems to be better maintained
and should be easy to set up for ourselves if needed.

This also fixes a warning when the client

use httpbingo for HTPP tests

This service is based on httpbin-go which seems to be better maintained
and should be easy to set up for ourselves if needed.

This also fixes a warning when the client is reused with the
max_bodysize mechanism

show more ...

Update core code to make use of sexplode()

This makes use of our own explode mechanism everywhere were we expect a
fixed number of results.

guard against unset parameters

Many string function will throw a deprecation warning in PHP 8.1 when
null is passed. This adds a few guards in some of our methods (not all,
yet)

HTTPClient: Fix missing processing of redirections with status code 303, 307, 308.

HTTP/1.1 (RFC 7231) and RFC 7538 also define the redirection status codes 303,
307 and 308. These should be also su

HTTPClient: Fix missing processing of redirections with status code 303, 307, 308.

HTTP/1.1 (RFC 7231) and RFC 7538 also define the redirection status codes 303,
307 and 308. These should be also supported as they are used more widely
nowadays (e.g. Google Docs).

show more ...

Address Scrutinizer inspection failure

The variable ``$port`` seems only to be defined at a later point.
As such the call to ``isset()`` seems to always evaluate to ``false``.

Fix various errors in PHPUnit tests on PHP 8

Restrictive Content-Security-Policy for media #1045

This adds a CSP header for all media delivered through our fetch.php
dispatcher. This should revent any scripts etc. to be executed when
scriptabl

Restrictive Content-Security-Policy for media #1045

This adds a CSP header for all media delivered through our fetch.php
dispatcher. This should revent any scripts etc. to be executed when
scriptable media, like SVG is used.

Suggestions on finetuning the policy are welcome.

The policy is added to the MEDIA_SENDFILE event, so plugins can easily
influence it. The way it is passed as an array should make it easier to
modify from plugins as well.

I put the mechanism to send the header into it's own class in the HTTP
namespace. Additional methods from inc/httputils could be moved here
later. The method might also be interesting for #2198 and #1676.

show more ...

Update HTTPClient.php

Fix the problem on OpenBSD 6.7, PHP 7.4.5-7.4.6 that prevents the extension repository to be pinged. See #3148.

check exceptions before proxy use #3055

There are several places in the HTTPClient where we check if a proxy is
set. But not all of them were checking the exceptions.