translation update

check permissions for admin menu item earlier

I am not sure why moving the context visibility check to a later stage
suddenly surfaced the issue of $INFO not being set in the
general_html_test. I wo

check permissions for admin menu item earlier

I am not sure why moving the context visibility check to a later stage
suddenly surfaced the issue of $INFO not being set in the
general_html_test. I would have expected the same issue before the
changes of 33792c0e7da35449c4591cfbb2b77377e2f465b1

In any case it makes not much sense to do the permission checks there
anyway. Doing it in the constructor makes more sense since this is not a
context sensitive check.

show more ...

Menu: check context visibility after assembling items

This addresses #4400. By checking the context visibility after the
assembly, the context is properly checked for plugin items.

rector and codesniffer fixes

Add experimental tree builder classes

These classes provide mechanisms to build a traversable tree of pages
and links. Either from the existing namespace structure, or from a
control page containing

Add experimental tree builder classes

These classes provide mechanisms to build a traversable tree of pages
and links. Either from the existing namespace structure, or from a
control page containing (possibly a nested) set of links.

The nodes returned by the tree are deliberately sparse. No ACL checking
is taking place. Developers can enrich (or omit) nodes and influence
recursion decisions via callbacks.

The tree can optionally be sorted by comparators provided in the
TreeSort class or a custom callback.

The API provided by these classes is not considered stable yet and may
change over time. Plugin authors are encouraged to use them and provide
feedback.

show more ...

translation update

API doc block updates

increased API version

API: proper access to the current media revision

Even when the revision is explictly given instead of set to 0. See #4419
for ponderings about why this is necessary and a different approach.

Added API endpoint core.getMediaHistory #4147

squashed commits of #4369

updated jquery and jquery-ui versions

set crossorigin header for manifest. fixes #4322

To summarize the issue:

1. the wiki is protected by Basic auth, outside of the wiki
2. chrome will not pass authentication credentials when accessin

set crossorigin header for manifest. fixes #4322

To summarize the issue:

1. the wiki is protected by Basic auth, outside of the wiki
2. chrome will not pass authentication credentials when accessing a
linked manifest
3. the webserver will deny access to the manifest

DokuWiki does not care about the auth credentials, because the manifest
returns public info only. The issue is really with the webserver
denying the request.

Using a crossorigin hint will work around the chrome behaviour. The only
potential downside would be that chrome now will send auth credentials
even when there is no web server based auth. Since DokuWiki doesn't care,
it's not really a downside.

show more ...

fix legacy XMLRPC call dokuwiki.appendPage #4418

treat getallheaders more suspiciously. fixes #4415

do not return zero error code for API exceptions. fixes #4413

translation update

translation update

subscriptions: include diff link with each page in 'list' mails

�� Rector and PHPCS fixes

Fix Ip tests

We no longer use the old regexp based config, so the tests failed.

use renamed trustedproxies setting in tests

style fix

rename trustedproxy option to trustedproxies

We use a new format (array instead of regex) and need a sure way to
recognize it. Zebra's approach would not have survived the editing via
config manager

rename trustedproxy option to trustedproxies

We use a new format (array instead of regex) and need a sure way to
recognize it. Zebra's approach would not have survived the editing via
config manager.
As a side effect this also introduces a new languange string, which is
good because the old one did no longer apply.

show more ...

some small cleanups in Ip class

most importantly do not crash on invalid config

use http_build_query() in buildURLparams()

buildURLparams() is used all throughout the code, but its implementation
was overly simplistic. This changes it to use the much better builtin
http_build_q

use http_build_query() in buildURLparams()

buildURLparams() is used all throughout the code, but its implementation
was overly simplistic. This changes it to use the much better builtin
http_build_query() function. This allows for correct encoding of array
values or deeper nested structures.

show more ...