manual code style fix

codestyle adjustments: EOF new lines

codestyle adjustments: function declaration braces/spaces

codestyle adjustments: class declaration braces

codestyle adjustments: function argument spacing

codestyle fixes

Apply rector fixes to lib/exe

Add JSON based alternative to XMLRPC

XMLRPC is a rather outdated and old-fashioned protocol not much in use
anymore. Developers prefer simpler, JSON based APIs.

This adds a new "JSONRPC" API. Basic

Add JSON based alternative to XMLRPC

XMLRPC is a rather outdated and old-fashioned protocol not much in use
anymore. Developers prefer simpler, JSON based APIs.

This adds a new "JSONRPC" API. Basically it exposes exactly the same
method calls as the XMLRPC API but using JSON instead of XML. It's not a
classical REST API, but should be just as easy to use for developers.

Here is an example call using CURL:

curl http://localhost/dokuwiki/lib/exe/jsonrpc.phs \
-H 'Content-Type: application/json' \
-H "Authorization: Bearer $token" \
-d '["wiki"]'

Please note that the above uses the token auth implemented in #2432.
Authentication via basic auth or cookies would work as well.

show more ...

Do not reminify minified plugin scripts

Adresses point 5) of #3645

extracted JS compressor into its own library

This moves our JavaScript compressor into its own composer dependency.

Fix: Do not garbage collect the JpegMeta object after reading a tag

MediaManager: remove check for removed option

The refshow option has been removed in
3e7e02779454686e1c639eb366a195bd1ab50458 and should not have been
checked anymore. This fixes a warning on PHP8 w

MediaManager: remove check for removed option

The refshow option has been removed in
3e7e02779454686e1c639eb366a195bd1ab50458 and should not have been
checked anymore. This fixes a warning on PHP8 when deleting a media
file.

Replaces #3912

show more ...

opening up CSP headers for fetch.php resources

This drops the sandbox attribute as discussed in #3710 to re-enable
inline display of PDFs in Safari again.

Dropping the sandbox attribute should also

opening up CSP headers for fetch.php resources

This drops the sandbox attribute as discussed in #3710 to re-enable
inline display of PDFs in Safari again.

Dropping the sandbox attribute should also help with using navigational
links within SVG files as discussed in
https://forum.dokuwiki.org/d/20420-how-to-embed-svg-with-links-the-proper-way

It also allows the loading of fonts from within SVG files. This
currently does not allow font loading from google fonts as asked for
in #3709 though. I'm not sure if we should favor any font provider here.

show more ...

:bug: Fixes #3738 , default value for mediamanger in fullscreen mode

minor SVG improvements

* never try to use slika to resize SVGs - let the browser do it
* use object-fit:cover for all images - this properly crops inside the
browser if the backend didn't (like fo

minor SVG improvements

* never try to use slika to resize SVGs - let the browser do it
* use object-fit:cover for all images - this properly crops inside the
browser if the backend didn't (like for SVGs). currently dokuwiki
template only - might be worth moving to default styles
* show previews for SVGs in media manager

show more ...

Fix #3619 and correctly handle exceptions in XMLRPC

This ensures that any exception happening during XMLRPC processing is
signalled correctly to the client as XML encoded error message.

use correct SVG interwiki fallback icon. #3611

SVG for interwiki links

This continues the quest to make more use of SVG in the DokuWiki
iconography. Interwiki links are now preferred in SVG, the existing
icons have been replaces by SVGs. This al

SVG for interwiki links

This continues the quest to make more use of SVG in the DokuWiki
iconography. Interwiki links are now preferred in SVG, the existing
icons have been replaces by SVGs. This also adjusts the default icons
for external, mail and UNC links.

Icons come from https://materialdesignicons.com/ and
https://github.com/edent/SuperTinyIcons

I kept the old default icons because they might be used by plugins and
templates. They might be deleted later

The DokuWiki interwiki icon huge in filesize compared to all others and
doesn't look good. Would be good to have a simplified version there.

show more ...

manifest: add NOSESSION to not require auth

Authentication shouldn't be required for a manifest file.

Fix to issue #3470

Fix Constant DOKU_MEDIADETAIL already defined

This error only occurs when PHPUnit runs both the `testScripts` and the
`test_Validity` suites [1], because all tests are running in the same
PHP proces

Fix Constant DOKU_MEDIADETAIL already defined

This error only occurs when PHPUnit runs both the `testScripts` and the
`test_Validity` suites [1], because all tests are running in the same
PHP process.

Adding an `if(!defined` check to avoid the problem.

[1]: ./phpunit.phar --filter 'testScripts|test_Validity'

show more ...

fix global access on detail.php and avoid null loading

Another problem surfaced in the tests

use SVG icons for media file links

The dokuwiki template should probably be adjusted a bit. Old png files
are not yet removed as they may be used elsewhere still.

Media CSP: omit script-src and add frame-ancestors

See comments for details:

https://github.com/splitbrain/dokuwiki/pull/3310#discussion_r506909727
https://github.com/splitbrain/dokuwiki/pull/3310#

Media CSP: omit script-src and add frame-ancestors

See comments for details:

https://github.com/splitbrain/dokuwiki/pull/3310#discussion_r506909727
https://github.com/splitbrain/dokuwiki/pull/3310#discussion_r506913304

show more ...

Restrictive Content-Security-Policy for media #1045

This adds a CSP header for all media delivered through our fetch.php
dispatcher. This should revent any scripts etc. to be executed when
scriptabl

Restrictive Content-Security-Policy for media #1045

This adds a CSP header for all media delivered through our fetch.php
dispatcher. This should revent any scripts etc. to be executed when
scriptable media, like SVG is used.

Suggestions on finetuning the policy are welcome.

The policy is added to the MEDIA_SENDFILE event, so plugins can easily
influence it. The way it is passed as an array should make it easier to
modify from plugins as well.

I put the mechanism to send the header into it's own class in the HTTP
namespace. Additional methods from inc/httputils could be moved here
later. The method might also be interesting for #2198 and #1676.

show more ...