form prefill: honor empty values

when a form was submitted with an empty input, that data should still
overwrite the preset value.

added dropdown type to new Form system #1312

supress lint error on LF signature #1101

use LF instead of CRLF as discussed in #1101

Until we did some more research on compatibility we should stick with
what works, even when the RFC says otherwise.

Should we decide to change line endi

use LF instead of CRLF as discussed in #1101

Until we did some more research on compatibility we should stick with
what works, even when the RFC says otherwise.

Should we decide to change line endings to RFC conform CRLF, it should
be done on the whole body, not the signature only.

show more ...

renamed ignoreacl parameter to useacl

translation update

add rel=noopener to links opening in new window

This is a security measurement supported in Chrome and Opera (and
probably other browsers soonish)

See http://mathiasbynens.github.io/rel-noopener/ f

add rel=noopener to links opening in new window

This is a security measurement supported in Chrome and Opera (and
probably other browsers soonish)

See http://mathiasbynens.github.io/rel-noopener/ for rationale

show more ...

autoload plugin namespace

This introduces an autoloader for namespaces starting with plugin\*

This way, plugins can easily have additional classes auto loaded without
needing to register their own

autoload plugin namespace

This introduces an autoloader for namespaces starting with plugin\*

This way, plugins can easily have additional classes auto loaded without
needing to register their own loader. A plugin\*\test\* namespace will
automatically be mapped to the _test directory of the plugin.

show more ...

make merge conflict labels completely customizable

Added 3way merge from PEAR Text_Diff3

This adds 3way merge functionality to our DifferenceEngine stack. The
code was taken from the PEAR Text_Diff3 package and adapted to work with
our implementatio

Added 3way merge from PEAR Text_Diff3

This adds 3way merge functionality to our DifferenceEngine stack. The
code was taken from the PEAR Text_Diff3 package and adapted to work with
our implementation.

For the curious:
Here's a short Origin tree of the different versions of the Diff code to
make clear how our implementation is related to the PEAR package.

-- original code Geoffrey T. Dairiki
`-- Adaption for the Horde project
|-- Adaption for phpwiki
| `-- Adaption for MediaWiki
| `-- Adaption for DokuWiki
`-- Creation of PEAR Text_Diff

show more ...

msglint is HTTPS now. fixed failing tests

URI scheme is only relevant for TLS if not proxy connection #1526

This should fix the test problems errors in #1527. When requesting a
HTTPS URI from a HTTP only proxy, the initial connection is *no

URI scheme is only relevant for TLS if not proxy connection #1526

This should fix the test problems errors in #1527. When requesting a
HTTPS URI from a HTTP only proxy, the initial connection is *not* TLS
secured. The URI scheme is only relevant when directly connecting.

This also changes the (wrong) assumption that everything on port 443 is
always TLS secured. Only the URI scheme should decide that.

show more ...

use SSL if scheme is https

This is to ensure that we use SSL/TLS if a custom port is defined an no
proxy is used.

Fixes #1526

add conf as global

restoring of mediafiles failed

translation update

avoid HTTP Response Splitting attacks via redirects #1513

The header() method of PHP is vulnerable to HTTP Response Splitting
attacks.

This change makes sure the URL passed to send_redirect (and th

avoid HTTP Response Splitting attacks via redirects #1513

The header() method of PHP is vulnerable to HTTP Response Splitting
attacks.

This change makes sure the URL passed to send_redirect (and thus to
header()) does not contain any control characters that would be needed
to execute such an attack.

Cleaning input is recommended anyway.

show more ...

translation update

another tiny tab CSS addition

missed a line in my last commit

minor change to make tabs more flexible

This makes it easier to create tabs with an active tab (no need for
additional markup)

remove unnecessary fullpath()

strlen does already calculate the right length

styled size changes

let path to revision file in tests depend on compression setting

reload some config settings after the conf reset in DokuWikiTest::setUp

remove fullpath() call

fullpath processing here seems unnecessary, wikiFN($ID) returns a valid filepath for the page text file.