Cast the ACL permission to an integer when saving the rule table

The bulk update path pulled the permission map straight from input and
wrote each value verbatim into a tab-separated ACL line, while

Cast the ACL permission to an integer when saving the rule table

The bulk update path pulled the permission map straight from input and
wrote each value verbatim into a tab-separated ACL line, while the
single-rule path already read it through an integer filter. A non-integer
value could carry a newline or tab and inject extra rules into the file.
Cast to int so the value can only ever be a single permission number.

This was not exploitable: the rule table is reachable only through the
ACL admin plugin, which is superuser-only and CSRF-protected, and a
superuser can already edit the ACL file directly. The cast is hardening
for consistency with the single-rule path.

show more ...

Translation update (ro)

updated rector and applied it

translation update

translation update

translation update

Revert "use a dispatcher to access static image files"

This reverts commit 944e9ba7254387adb60f253b0d8796f2276096b1.

It was accidentally pused to master before review. A PR with a revert
for the re

Revert "use a dispatcher to access static image files"

This reverts commit 944e9ba7254387adb60f253b0d8796f2276096b1.

It was accidentally pused to master before review. A PR with a revert
for the revert will be pushed shortly.

show more ...

use a dispatcher to access static image files

This makes it possible to replace default images in an update safe way.
It also addresses the issue raised in dokuwiki/docker#16

A .htaccess rewrite ca

use a dispatcher to access static image files

This makes it possible to replace default images in an update safe way.
It also addresses the issue raised in dokuwiki/docker#16

A .htaccess rewrite catches any direct accesses that might come in from
plugins.

show more ...

align url for lib/plugin members

ref https://github.com/dokuwiki/dokuwiki/issues/4270

- align url of `plugin.info.txt` to standard prefix
- realign spacing as applicable

Updated Lithuanian translation

Adjust ACL remote component to new system

There is no need to implement getMethods anymore. All data comes from
reflection

another set of api tests

translation update

Use str_starts_with/str_ends_with

adjusted docblocks for renamed class aliases

code style: line breaks

code style: operator spacing

coding style: control flow line breaks

Apply rector renames

Apply rector fixes to lib/plugin/acl

translation update

translation update

translation update