Update core code to make use of sexplode()

This makes use of our own explode mechanism everywhere were we expect a
fixed number of results.

Remove the htmlok and phpok embedding options

Both options have grave security implications and novice users seem to
ignore advice about them. In the last decades I never came across a wiki
that had

Remove the htmlok and phpok embedding options

Both options have grave security implications and novice users seem to
ignore advice about them. In the last decades I never came across a wiki
that had legitimate use of these options.

If someone needs the functionality, it can easily be added back using a
plugin. But I prefer to give users one less option to shoot themselves
in the foot.

Removal of the translations for the config strings can follow after this
has been merged.

show more ...

Accept returnonly parameter to header()

Merge pull request #3574 from splitbrain/php81

Some PHP 8.1 compatibility fixes

move resolvers into File namespace

Merge branch 'master' into refactorResolving

* master: (142 commits)
authPDO: extend mysql test to ensure multiple groups are read
update DokuWiki install URL
update smtp plugin URL
update f

Merge branch 'master' into refactorResolving

* master: (142 commits)
authPDO: extend mysql test to ensure multiple groups are read
update DokuWiki install URL
update smtp plugin URL
update flashplayer URL
Revert "Merge pull request #3039 from takuy/video-attributes"
Revert "fixed video attribute handling in php8"
Revert "more php8 fixes for the video attributes"
guard against unsert user name. fixes #3455
remove remaining X-UA-Compatible headers. fixes #3434
more php8 fixes for the video attributes
fixed video attribute handling in php8
fix test for draft file
fix security problems in draft handling. fixes #3565
fix handling of loading auth backend
check CSRF token in draftdel action. fixes #3563
ignore another PSR12 style check for now
authplain: properly clean user names
Removes use of deprecated create_function() in teests. Replaces them with anonymous functions. Refs #3545
check security token on logout. fixes #3561
create SECURITY.md fixes #3558
...

show more ...

guard against unset parameters

Many string function will throw a deprecation warning in PHP 8.1 when
null is passed. This adds a few guards in some of our methods (not all,
yet)

always use the same htmlspecialchars setup

defaults for htmlspecialchars change in PHP 8.1

All calls should always use our hsc() method to ensure comparability
(especially when testing)

coding style of functions using ChangeLog

Merge branch 'master' into refactorResolving

* master: (257 commits)
add unit test for namespace exclusion in ft_pageLookup()
exclude ns in pagelook ups
translation update
Obsolete attribute

Merge branch 'master' into refactorResolving

* master: (257 commits)
add unit test for namespace exclusion in ft_pageLookup()
exclude ns in pagelook ups
translation update
Obsolete attribute
translation update
translation update
translation update
translation update
translation update
Add missing `;` causing syntax error in js.php
Run tests on PHP 8.0 now
translation update
translation update
test: run test in separate process in case of error
test: fix two tests on PHP8
style: fix test code style
fix method handling for RPC_CALL_ADD
destroy the JPEGMeta object after use
upgrade simplepie to 1.5.6
dwpage: output meta data as JSON
...

show more ...

replace deprecated function calls

Replaces the use of resolve_pageid() and resolve_mediaid() with the
proper class invocations

Merge branch 'master' into phpunit8

* master:
dwpage: output meta data as JSON
dwpage: rename gmeta into getmeta
translation update
Make it easier to remove h1 around logo
fix: better max-

Merge branch 'master' into phpunit8

* master:
dwpage: output meta data as JSON
dwpage: rename gmeta into getmeta
translation update
Make it easier to remove h1 around logo
fix: better max-width for images in tables
dwpage.php: add an option to get metadata
rename namespace Media to File
use SVG icons for media file links
readded $jump mechanism, removed unused functions
fix use of $rev parameter
fix entity definition
reenable the option to display a relative namespace for media files
simplified the media_searchlist tests
make use of the new media file classes
SVG based file icons
first go a refactoring the media manager
lazy load images

show more ...

Merge branch 'lazyload'

* lazyload:
lazy load images

Fix various errors in PHPUnit tests on PHP 8

Fix Undefined array key in xhtml.php

lazy load images

This adds the loading="lazy" attribute to embedded images and the
thumbnails in the media manager. This instructs modern broswers to load
images on demand when they come into view.

lazy load images

This adds the loading="lazy" attribute to embedded images and the
thumbnails in the media manager. This instructs modern broswers to load
images on demand when they come into view. It can reduce used bandwith
and improve perceived speed.

show more ...

SVG based smileys

This patch replaces our old gif based smileys by SVG based ones from the
Twemoji project. This allows for scaling the emojis with the text
they're used in.

Merge pull request #3003 from splitbrain/curid-by-js

generate curid class by jQuery

Merge pull request #2994 from bleistivt/patch-3

Prevent double encoding audio/video titles

generate curid class by jQuery

internallink's output <a> tag gets a new attribute, data-wiki-id, so that
jQuery doesn't need to parse the various link format to get the ID.

Any plugin javascript th

generate curid class by jQuery

internallink's output <a> tag gets a new attribute, data-wiki-id, so that
jQuery doesn't need to parse the various link format to get the ID.

Any plugin javascript that loads after DokuWiki's script should be able to
discover curid class as usual, as long as they use the default js.php
facility.

fixes #1511, fixes #2968.

show more ...

Merge pull request #2802 from splitbrain/interwiki-remove-golucky

Remove Google Lucky for non-existing interwiki links

Prevent double encoding audio/video titles

PHP8 fix part 4: Trying to access array offset on value of type bool/null

Fix curly brace syntax. PHP 7.3 deprecations in inc/ directory.

Add "default" keyword support for interwiki links

Thank you @selfthinker for the suggestion!

If nothing is found in default, it will still fall back to "". Test is added as well.

Meantime I fixed

Add "default" keyword support for interwiki links

Thank you @selfthinker for the suggestion!

If nothing is found in default, it will still fall back to "". Test is added as well.

Meantime I fixed a problem that Scrutinizer complained about.

show more ...