make $INFO global during TestRequests in detail.php

check permissions for admin menu item earlier

I am not sure why moving the context visibility check to a later stage
suddenly surfaced the issue of $INFO not being set in the
general_html_test. I wo

check permissions for admin menu item earlier

I am not sure why moving the context visibility check to a later stage
suddenly surfaced the issue of $INFO not being set in the
general_html_test. I would have expected the same issue before the
changes of 33792c0e7da35449c4591cfbb2b77377e2f465b1

In any case it makes not much sense to do the permission checks there
anyway. Doing it in the constructor makes more sense since this is not a
context sensitive check.

show more ...

Menu: check context visibility after assembling items

This addresses #4400. By checking the context visibility after the
assembly, the context is properly checked for plugin items.

translation update

supress warnings in opcache_reset() fixes #4375

If opcache is enabled, but access to it's API is restricted a warning is
shown when we call opcache_reset(). Since we don't know if it's
restricted, w

supress warnings in opcache_reset() fixes #4375

If opcache is enabled, but access to it's API is restricted a warning is
shown when we call opcache_reset(). Since we don't know if it's
restricted, we have to supress the warning

show more ...

rector and codesniffer fixes

use B flag for Apache rewrite rules. fixes #4238

The B flag reenables passing spaces and other special chars in URLs to
be picked up (and cleaned) by DokuWiki's ID processing.

The flag has been ava

use B flag for Apache rewrite rules. fixes #4238

The B flag reenables passing spaces and other special chars in URLs to
be picked up (and cleaned) by DokuWiki's ID processing.

The flag has been available in non-broken form since Apache 2.2.9 and
should be safe to use.

See https://stackoverflow.com/q/3460643

show more ...

explicitly track known config files, gitignore the rest

fixes #4308

line break pre when printing. fixes #4424

Add experimental tree builder classes

These classes provide mechanisms to build a traversable tree of pages
and links. Either from the existing namespace structure, or from a
control page containing

Add experimental tree builder classes

These classes provide mechanisms to build a traversable tree of pages
and links. Either from the existing namespace structure, or from a
control page containing (possibly a nested) set of links.

The nodes returned by the tree are deliberately sparse. No ACL checking
is taking place. Developers can enrich (or omit) nodes and influence
recursion decisions via callbacks.

The tree can optionally be sorted by comparators provided in the
TreeSort class or a custom callback.

The API provided by these classes is not considered stable yet and may
change over time. Plugin authors are encouraged to use them and provide
feedback.

show more ...

translation update

updated dev dependencies

removed dev suggestions from composer file

Those are now specified in the _test composer file.

API doc block updates

increased API version

API: proper access to the current media revision

Even when the revision is explictly given instead of set to 0. See #4419
for ponderings about why this is necessary and a different approach.

Added API endpoint core.getMediaHistory #4147

squashed commits of #4369

updated jquery and jquery-ui versions

set crossorigin header for manifest. fixes #4322

To summarize the issue:

1. the wiki is protected by Basic auth, outside of the wiki
2. chrome will not pass authentication credentials when accessin

set crossorigin header for manifest. fixes #4322

To summarize the issue:

1. the wiki is protected by Basic auth, outside of the wiki
2. chrome will not pass authentication credentials when accessing a
linked manifest
3. the webserver will deny access to the manifest

DokuWiki does not care about the auth credentials, because the manifest
returns public info only. The issue is really with the webserver
denying the request.

Using a crossorigin hint will work around the chrome behaviour. The only
potential downside would be that chrome now will send auth credentials
even when there is no web server based auth. Since DokuWiki doesn't care,
it's not really a downside.

show more ...

do not check for deprecated functions in installer

our UTF-8 fallbacks should not fall back on the utf8_decode/encode
functions anymore, so this check is no longer useful

sligthly related to #4354

authldap: avoid warning on invalid mapping setup. #4399

updated php-cli #4384

fix legacy XMLRPC call dokuwiki.appendPage #4418

treat getallheaders more suspiciously. fixes #4415

do not return zero error code for API exceptions. fixes #4413