feat: add diff to disableactions config option

Add 'diff' as a checkbox option in the disableactions configuration
setting, allowing admins to disable the diff action separately from
other actions l

feat: add diff to disableactions config option

Add 'diff' as a checkbox option in the disableactions configuration
setting, allowing admins to disable the diff action separately from
other actions like revisions or edit.

When diff is disabled, diff icon links in revision lists and recent
changes are hidden, and the "compare" submit button on page and media
revision pages is removed.

Fixes #4504

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

show more ...

updated rector and applied it

editor a11y: remove tabindex

these do more harm then good

Login accessibility improvements

- addes aria and role attributes to the login form for better autocompletion

SECURITY: fix XSS vulnerability. fixes #4512

The namespace selector in the advanced search tools did not correctly
escape the user provided namespace.

This issue was reported by Mario Tesoro.

Revert "use a dispatcher to access static image files"

This reverts commit 944e9ba7254387adb60f253b0d8796f2276096b1.

It was accidentally pused to master before review. A PR with a revert
for the re

Revert "use a dispatcher to access static image files"

This reverts commit 944e9ba7254387adb60f253b0d8796f2276096b1.

It was accidentally pused to master before review. A PR with a revert
for the revert will be pushed shortly.

show more ...

use a dispatcher to access static image files

This makes it possible to replace default images in an update safe way.
It also addresses the issue raised in dokuwiki/docker#16

A .htaccess rewrite ca

use a dispatcher to access static image files

This makes it possible to replace default images in an update safe way.
It also addresses the issue raised in dokuwiki/docker#16

A .htaccess rewrite catches any direct accesses that might come in from
plugins.

show more ...

�� Rector and PHPCS fixes

Fix PHP warning

E_WARNING: Trying to access array offset on value of type bool
./inc/Ui/Recent.php(165)

allow admin components to skip being shown in the admin menu

This is related to #4249. At least the farmer plugin provides a top
level admin component and several sub components which are loaded fro

allow admin components to skip being shown in the admin menu

This is related to #4249. At least the farmer plugin provides a top
level admin component and several sub components which are loaded from
the top component. For this use case it makes sense to be able to hide
components from the admin interface. Default remains to show all.

show more ...

escape environment data in admin interface

Data might contain special chars.

Output more version data on the admin screen

Bug reports are often lacking crucial information about the environment
the wiki is run on and novice users often do not know how to obtain this
data.

T

Output more version data on the admin screen

Bug reports are often lacking crucial information about the environment
the wiki is run on and novice users often do not know how to obtain this
data.

This patch gathers some environmental information and outputs it next to
the DokuWiki version number on the admin screen.

Info included (if obtainable):

* PHP version
* Linux Distribution name and version
* Operating System and Version (refers to kernel version on linux)
* The PHP SAPI (modphp, cgi, fcgi)
* If running on kubernetes or docker

show more ...

introduce a template function to output a inline script

This handles the output of a potentially available nonce.

The delete profile form was no more visible due to a missing echo

Sorry. I missed this one. It was on my list of errors but I forgot it.

Introduce token authentication #2431

This generates a JWT token for users. This token can be sent in a Bearer
authentication header as a login mechanism. Users can reset their token
in the profile.

Introduce token authentication #2431

This generates a JWT token for users. This token can be sent in a Bearer
authentication header as a login mechanism. Users can reset their token
in the profile.

Note: a previously suggested implementation used a custom token format,
not JWT tokens

show more ...

update Recent as well

little refactoring

Let ChangeLog set the mode(media/page) for a revision log entry

set media entry to fix Undefined array key

Fix #3958

Use str_starts_with/str_ends_with

code style: line breaks

Rector to rename print to echo calls

coding style: control flow line breaks

coding style: control flow whitespaces

coding style: function call spacing