Restrictive Content-Security-Policy for media #1045

This adds a CSP header for all media delivered through our fetch.php
dispatcher. This should revent any scripts etc. to be executed when
scriptabl

Restrictive Content-Security-Policy for media #1045

This adds a CSP header for all media delivered through our fetch.php
dispatcher. This should revent any scripts etc. to be executed when
scriptable media, like SVG is used.

Suggestions on finetuning the policy are welcome.

The policy is added to the MEDIA_SENDFILE event, so plugins can easily
influence it. The way it is passed as an array should make it easier to
modify from plugins as well.

I put the mechanism to send the header into it's own class in the HTTP
namespace. Additional methods from inc/httputils could be moved here
later. The method might also be interesting for #2198 and #1676.

show more ...

fix: mark inputs of styling plugin as required

While this cannot ensure that the value is valid, it should prevent
accidental saving of an empty field, which crashes the less compiler.

Fixes #2246

replace deprecated function calls #3266

upgraded php-archive to 1.2.0 #3298

fixes an incompatibility with PHP 8

Fix proper param order and use main function name instead of alias 'join'.

Fixing of cell width

translation update

translation update

translation update

translation update

translation update

translation update

translation update

refresh user cache in plain auth on user modifying

When a user login was renamed, the user appeared twice. Once as the old
user and once as the new user.

translation update

translation update

translation update

translation update

translation update

translation update

translation update

translation update

translation update

translation update

translation update