translation update
Partial Plugin Translation for WelshPlugin translation #1
Update help.txtUpdated a word wrongly written on spanish
updated dates in various info.txt files
remove IE7 support
changed all input type=submit buttons to button type=submit button for better stylability
PHPDocs for remote and action
Fix variable name typo
Use io_replaceInFile for updating auth
Reverting changes so as to use already existing function, and adding admin check
check permissions in ACL plugin's RPC API component. #1056Security FixSeverity: MediumType: Remote Priviledge EscalationRemote: yesVulnerability Details:This fixes a security hole in
check permissions in ACL plugin's RPC API component. #1056Security FixSeverity: MediumType: Remote Priviledge EscalationRemote: yesVulnerability Details:This fixes a security hole in the ACL plugins remote API component. Theplugin failed to check for superuser permissions before executing ACLaddition or deletion. This means everybody with permissions to call theXMLRPC API also had permissions to set up their own ACL rules and thuscircumventing any existing rules.Risk Assessment:The XMLRPC API in DokuWiki is marked experimental and off by default. Italso implements an additional safeguard by giving access to a configuredcircle of users and groups only. So only a minor number of DokuWikiinstallations will be affected at all.For affected installations the risk is high if users with access to theAPI are not to be trusted.Thus the overall severity of medium.Resolution:Installations applying this commit are safe. A hotfix is about to bereleased. Meanwhile users are advised to disable the XMLRPC API in theconfig manager.
show more ...
Fixing bugs found by scrutinizer
Adding listAcls to the XMLRPC API as suggested in Issue #1054
Losslessly reduced PNG images with optipng -o7 -strip all, advdef -z4 -i60, and advpng -z4 -i60.
12345678910>>...31