| 30d94a17 | 15-Dec-2018 |
Schplurtz le Déboulonné <schplurtz@laposte.net> |
translation update |
| 48ca2703 | 13-Dec-2018 |
Andreas Gohr <gohr@cosmocode.de> |
isAccessibleByCurrentUser() can run without $INFO
Because the isAccessibleByUser method can be run in contexts where $INFO
is not available, an explicit check is needed. |
| 38a9f507 | 12-Dec-2018 |
Jacob Palm <mail@jacobpalm.dk> |
translation update |
| 60764596 | 12-Dec-2018 |
Andreas Gohr <gohr@cosmocode.de> |
removed unnecessary count |
| 4b6ca5c2 | 10-Dec-2018 |
Frederico Gonçalves Guimarães <frederico@teia.bio.br> |
translation update |
| 418dfc11 | 09-Dec-2018 |
HokkaidoPerson <dosankomali@yahoo.co.jp> |
translation update |
| f97f7cdc | 04-Dec-2018 |
Csaba Tóth <csaba.toth@i3rendszerhaz.hu> |
php7 fix
php7 syntax fix.
https://forum.dokuwiki.org/thread/15725
https://forum.dokuwiki.org/post/58606 |
| 82869352 | 04-Dec-2018 |
Csaba Tóth <csaba.toth@i3rendszerhaz.hu> |
Fix a php7 bug
php7 syntax fix.
https://forum.dokuwiki.org/thread/15725
https://forum.dokuwiki.org/post/58606 |
| c0842a77 | 04-Dec-2018 |
bleistivt <bleistivt@users.noreply.github.com> |
Add wbr style for IE 11 |
| 54436b19 | 03-Dec-2018 |
bleistivt <bleistivt@users.noreply.github.com> |
Fix zero width spaces in diffs |
| 77244e70 | 29-Nov-2018 |
Michael Hamann <michael@content-space.de> |
Security: Fix ACL check in search_allpages
Due to the changes in 8f34cf3d32c9c091caa658472bd4e3a8270969a8, the ACL
check in search_allpages was only executed when 'skipacl' has been
explicitly set t
Security: Fix ACL check in search_allpages
Due to the changes in 8f34cf3d32c9c091caa658472bd4e3a8270969a8, the ACL
check in search_allpages was only executed when 'skipacl' has been
explicitly set to false. Otherwise, only ACLs for namespaces were
checked (unless the sneakyacl option was passed). The documentation
states that the default for 'skipacl' is false, so setting it to false
shouldn't be necessary.
From all I can see, this does not concern DokuWiki itself as
search_allpages is never used without the 'skipacl' option explicitly
set to true or false. However, this causes serious security issues in
plugins that rely on this ACL check in search_allpages like the include
plugin.
show more ...
|
| 33c70ba9 | 28-Nov-2018 |
Eddy <eddy@mail.it> |
translation update |
| 3c0e61e2 | 28-Nov-2018 |
Traend <Traend@ruu.kr> |
translation update |
| 6c8673fe | 27-Nov-2018 |
Andreas Gohr <andi@splitbrain.org> |
fix call to FatalException
parameters were in the wrong order |
| d18fd84d | 27-Nov-2018 |
Traend <Traend@ruu.kr> |
translation update |
| b394c7b9 | 27-Nov-2018 |
Traend <Traend@ruu.kr> |
translation update |
| ac078773 | 25-Nov-2018 |
Katerina Katapodi <extragold1234@hotmail.com> |
translation update |
| f436c27f | 24-Nov-2018 |
HokkaidoPerson <dosankomali@yahoo.co.jp> |
translation update |
| 3c7aca05 | 23-Nov-2018 |
Márcio Gomes Gonçalves <gomes@metha.com.br> |
translation update |
| 569fd3cf | 23-Nov-2018 |
Katerina Katapodi <extragold1234@hotmail.com> |
translation update |
| 9392cc9f | 23-Nov-2018 |
Katerina Katapodi <extragold1234@hotmail.com> |
translation update |
| 5842c86e | 22-Nov-2018 |
Katerina Katapodi <extragold1234@hotmail.com> |
translation update |
| 84cbcac6 | 21-Nov-2018 |
Katerina Katapodi <extragold1234@hotmail.com> |
translation update |
| 79d19584 | 21-Nov-2018 |
Lars Pötter <justanotherone@gmx.net> |
add definition of abbreviation |
| 1fa9a674 | 20-Nov-2018 |
Jürgen Fredriksson <jfriedrich@gmx.at> |
translation update |