| 26e24149 | 02-Jan-2019 |
ThorPrestboen <thor.erling.prestboen@gmail.com> |
translation update |
| 7e82399c | 26-Dec-2018 |
En Matt <heartattack@free.fr> |
translation update |
| d4424692 | 25-Dec-2018 |
valunf <45840701+valunf@users.noreply.github.com> |
Added rounds support for sha512
sha512 now supports hashes for salt started with "rounds=5000$" |
| 0e2d62e8 | 22-Dec-2018 |
HokkaidoPerson <dosankomali@yahoo.co.jp> |
translation update |
| 30d94a17 | 15-Dec-2018 |
Schplurtz le Déboulonné <schplurtz@laposte.net> |
translation update |
| 38a9f507 | 12-Dec-2018 |
Jacob Palm <mail@jacobpalm.dk> |
translation update |
| 4b6ca5c2 | 10-Dec-2018 |
Frederico Gonçalves Guimarães <frederico@teia.bio.br> |
translation update |
| 418dfc11 | 09-Dec-2018 |
HokkaidoPerson <dosankomali@yahoo.co.jp> |
translation update |
| 54436b19 | 03-Dec-2018 |
bleistivt <bleistivt@users.noreply.github.com> |
Fix zero width spaces in diffs |
| 77244e70 | 29-Nov-2018 |
Michael Hamann <michael@content-space.de> |
Security: Fix ACL check in search_allpages
Due to the changes in 8f34cf3d32c9c091caa658472bd4e3a8270969a8, the ACL
check in search_allpages was only executed when 'skipacl' has been
explicitly set t
Security: Fix ACL check in search_allpages
Due to the changes in 8f34cf3d32c9c091caa658472bd4e3a8270969a8, the ACL
check in search_allpages was only executed when 'skipacl' has been
explicitly set to false. Otherwise, only ACLs for namespaces were
checked (unless the sneakyacl option was passed). The documentation
states that the default for 'skipacl' is false, so setting it to false
shouldn't be necessary.
From all I can see, this does not concern DokuWiki itself as
search_allpages is never used without the 'skipacl' option explicitly
set to true or false. However, this causes serious security issues in
plugins that rely on this ACL check in search_allpages like the include
plugin.
show more ...
|
| 33c70ba9 | 28-Nov-2018 |
Eddy <eddy@mail.it> |
translation update |
| 3c0e61e2 | 28-Nov-2018 |
Traend <Traend@ruu.kr> |
translation update |
| 6c8673fe | 27-Nov-2018 |
Andreas Gohr <andi@splitbrain.org> |
fix call to FatalException
parameters were in the wrong order |
| d18fd84d | 27-Nov-2018 |
Traend <Traend@ruu.kr> |
translation update |
| b394c7b9 | 27-Nov-2018 |
Traend <Traend@ruu.kr> |
translation update |
| f436c27f | 24-Nov-2018 |
HokkaidoPerson <dosankomali@yahoo.co.jp> |
translation update |
| 3c7aca05 | 23-Nov-2018 |
Márcio Gomes Gonçalves <gomes@metha.com.br> |
translation update |
| 1fa9a674 | 20-Nov-2018 |
Jürgen Fredriksson <jfriedrich@gmx.at> |
translation update |
| 4905bf1b | 20-Nov-2018 |
Katerina Katapodi <extragold1234@hotmail.com> |
translation update |
| a2b11635 | 20-Nov-2018 |
Katerina Katapodi <extragold1234@hotmail.com> |
translation update |
| 919f6a87 | 20-Nov-2018 |
Katerina Katapodi <extragold1234@hotmail.com> |
translation update |
| cefc8984 | 19-Nov-2018 |
Alex Cachinero <anarres@protonmail.com> |
translation update |
| af98326f | 14-Nov-2018 |
Hakan <hakandursun2009@gmail.com> |
translation update |
| 42a8cadf | 11-Nov-2018 |
HokkaidoPerson <dosankomali@yahoo.co.jp> |
translation update |
| b9fd2fe7 | 10-Nov-2018 |
En Matt <heartattack@free.fr> |
translation update |