do not static cache useheading during tests

This took me way to long to figure out. The useheading setting was
cached in a static variable which is fine usually as it doesn't change
during a single

do not static cache useheading during tests

This took me way to long to figure out. The useheading setting was
cached in a static variable which is fine usually as it doesn't change
during a single request. But in testing we want to change it often.

show more ...

fix problems with header that look falsy. fixes #1770

load jquery via https always

split off jquery from other JS and add CDN option #1766

jQuery (and UI and Migrate) are now loaded separately from the rest of
the JavaScript. This adds at least one HTTP request more but has some
a

split off jquery from other JS and add CDN option #1766

jQuery (and UI and Migrate) are now loaded separately from the rest of
the JavaScript. This adds at least one HTTP request more but has some
advantages:

* browsers can cache it independently
* the cache is only invalidated when versions update
* we do not apply any transformations (replacements, minimizing, etc) on
this code anymore which makes our dispatcher faster for the other JS
* browsers seem to load (not execut) both (jquery and other) parallel,
which might increase download speed a bit

This split allowed for the introduction of a new config: jquerycdn. When
enabled the 3 jquery files are loaded from jQueries CDN. This adds
another two HTTP requests but:

* since it's another host those files do not apply to the 4 request per
host limit and can be loaded (not executed) in paralell which might
increase download speeds a bit
* the CDN is distributed worldwide which means files are requested from
the closest location, increasing the download speeds
* since these files/CDN are very popular, chances are high that people
already have them cached in their browsers, reducing the download time
to 0 and effectiely halving the javascript needed to download

The option currently defaults to 'off', but I would argue 'on' would be
the better default.

show more ...

jQuery Updates

- jQuery to 3.1.1
- jQuery UI to 1.12.1
- jQuery Migrate to 3.0.0

There are a few warnigs from migrate that have to be fixed. The toggles
in the Media Manager are also missing their

jQuery Updates

- jQuery to 3.1.1
- jQuery UI to 1.12.1
- jQuery Migrate to 3.0.0

There are a few warnigs from migrate that have to be fixed. The toggles
in the Media Manager are also missing their proper icons.

show more ...

Use cryptographically secure pseudo random number generator (CSPRNG)

Uses paragonie/random_compat instead of insecure home-brewed code.

It's NEVER fine to fall back to mt_rand() for secure random.

Use cryptographically secure pseudo random number generator (CSPRNG)

Uses paragonie/random_compat instead of insecure home-brewed code.

It's NEVER fine to fall back to mt_rand() for secure random.

Fixes #1760.

show more ...

translation update

translation update

translation update

translation update

translation update

translation update

translation update

Implemented interwiki substitution for external images (issue #1614).

translation update

translation update

translation update

translation update

translation update

translation update

translation update

translation update

translation update

translation update

Fix typo in fr files

*Participe présent* is needed here.

« page correspondante à » -> « correspondant à »