GeSHi updated to 1.0.8.10

Restore page versions - add timestamp of the restored version to to the summary field.
This allows easier identifying of which version has been restored. (FS#2522)

fixed a JSON bug with handling backspaces

This was fixed in upstream and the upstream tests caught this :-)

also skip native JSON encoding when skipnative is true

removed duplicated documentation header in JSON.php

avoid integer overflow in PassHash::pmd5 method

Input iteration counts are squared in the function and passing something
above 30 is giving integer overflows on 32 bit systems (and causes insane
ite

avoid integer overflow in PassHash::pmd5 method

Input iteration counts are squared in the function and passing something
above 30 is giving integer overflows on 32 bit systems (and causes insane
iteration counts on 64bit systems).

show more ...

Esperanto language update

Japanese language update

French language update

make HTTPClient loadable via autoloader

this fixes the HTTP tests which do test the base class directly instead
of the DokuHTTPClient subclass

display uploadable file size in media manager FS#2425

added option to disable reverse DNS lookups

improved toc changes and sidebar toggling

some edge case checking in search result highlighting

Resolve empty page ID to configured start page

escape target error message (SECURITY) FS#2487 FS#2488

The error message when a non-existant editor was tried to load wasn't
escaped correctly, allowing to introduce arbitrary JavaScript to the
outp

escape target error message (SECURITY) FS#2487 FS#2488

The error message when a non-existant editor was tried to load wasn't
escaped correctly, allowing to introduce arbitrary JavaScript to the
output, leading to a XSS vulnerability.

Note: the reported second XCRF vulnerability is the same bug, the xploit
code simply uses JavaScript to extract a valid CSRF token from the site

show more ...

have a default plugin config

This allows us to distribute plugins that are disabled by default. We'll
may want to do that for a special unit test plugin

no need to pass objects by reference

fixes passing null to event hook registration

Romanian language update

Marathi language update

Remote search is aware of useheading option

Added page title to search results in Remote API

Arabic Language Update

changed internal Mailer members from private to protected

made it possible to disable HTML mails in the config