| 7c809c8e | 28-Jun-2023 |
Xrizzy <xrizzy@web.de> |
translation update |
| 5cefb623 | 22-Jun-2023 |
Eduardo Mozart de Oliveira <2974895+eduardomozart@users.noreply.github.com> |
Update media.php |
| 0743feea | 17-Jun-2023 |
Daniel Dias Rodrigues <danieldiasr@gmail.com> |
translation update |
| 7bb0ac82 | 12-Jun-2023 |
Andreas Gohr <andi@splitbrain.org> |
installing extensions needs to reset the opcache |
| 8fae2e99 | 09-Jun-2023 |
Andreas Gohr <andi@splitbrain.org> |
Check method and content type in JSONRPC server
Addresses #3991 |
| 64259528 | 09-Jun-2023 |
Andreas Gohr <andi@splitbrain.org> |
removed outdated version check |
| 3a2e53cf | 09-Jun-2023 |
Andreas Gohr <andi@splitbrain.org> |
do not test on PHP <7.4 anymore |
| cc7691ad | 09-Jun-2023 |
Andreas Gohr <andi@splitbrain.org> |
enforce content type on XML-RPC. addresses #3991
This ensures only text/xml or application/xml content types are accepted when communicating with the XML-RPC API |
| 64d8abdb | 09-Jun-2023 |
Andreas Gohr <andi@splitbrain.org> |
updated composer dependencies
updates may also be caused by the php platform version increase in the last commit |
| c49393f5 | 09-Jun-2023 |
Andreas Gohr <andi@splitbrain.org> |
increase required PHP version to 7.4 |
| bf8392eb | 09-Jun-2023 |
Andreas Gohr <andi@splitbrain.org> |
use samesite=Lax cookie attribute #2849
Since this has been the default in Chrome for a while, no sideeffects are to be expected. |
| 68253c2b | 01-Jun-2023 |
Andreas Gohr <andi@splitbrain.org> |
be more defensive when matching for section highlight |
| fd853d4a | 01-Jun-2023 |
fiwswe <53953985+fiwswe@users.noreply.github.com> |
Corrected logic error |
| ec2224d9 | 01-Jun-2023 |
Andreas Gohr <andi@splitbrain.org> |
language updates for #3010 addition to #3981 |
| a4231b8c | 01-Jun-2023 |
fiwswe <53953985+fiwswe@users.noreply.github.com> |
Avoid warning in do=check for anonymous users
fixes #3984 |
| eea5d349 | 31-May-2023 |
fiwswe <53953985+fiwswe@users.noreply.github.com> |
Better fix
This is more concise and it also fixes a similar case in a different line.
`empty($userinfo['mail'])`correctly deals with:
- `$userinfo === false` => `true`
- `!array_key_exists('mail'
Better fix
This is more concise and it also fixes a similar case in a different line.
`empty($userinfo['mail'])`correctly deals with:
- `$userinfo === false` => `true`
- `!array_key_exists('mail', $userinfo)` => `true`
- `!isset($userinfo['mail'])` => `true`
- `$userinfo['mail'] === ''` => `true`
show more ...
|
| e6af5171 | 31-May-2023 |
fiwswe <53953985+fiwswe@users.noreply.github.com> |
Fix #3982 |
| 01a865f6 | 29-May-2023 |
Gerrit Uitslag <klapinklapin@gmail.com> |
Removed link, because it is wrongly cached. Fixes #3013 |
| 755a9150 | 24-May-2023 |
Eduardo Mozart de Oliveira <eduardomozart182@gmail.com> |
translation update |
| fa8dd74c | 20-May-2023 |
Mykhailo <mvkorobkov@gmail.com> |
translation update |
| 4ebc7ff4 | 15-May-2023 |
Daniel Dias Rodrigues <danieldiasr@gmail.com> |
translation update |
| 53df38b0 | 15-May-2023 |
Andreas Gohr <andi@splitbrain.org> |
fix XSS in RSS syntax
The title was not correctly escaped when written to the doc in xhtml renderer.
SimplePie does no content escaping on its own (a comment in the code seems to suggest that that
fix XSS in RSS syntax
The title was not correctly escaped when written to the doc in xhtml renderer.
SimplePie does no content escaping on its own (a comment in the code seems to suggest that that was assumed). Instead the content is passed on as-is from the feed.
This patch also applies some more escaping on the description output (though it should have been relatively safe thanks to the use of striptags).
This was discovered by @ry0tak and reported in https://huntr.dev/bounties/c6119106-1a5c-464c-94dd-ee7c5d0bece0/
show more ...
|
| 728c1abe | 27-Apr-2023 |
Petr Kajzar <petr.kajzar@centrum.cz> |
translation update |
| d2e112c0 | 27-Apr-2023 |
Andreas Gohr <andi@splitbrain.org> |
fix line length issue |
| f657e5d0 | 27-Apr-2023 |
Andreas Gohr <andi@splitbrain.org> |
Add JSON based alternative to XMLRPC
XMLRPC is a rather outdated and old-fashioned protocol not much in use anymore. Developers prefer simpler, JSON based APIs.
This adds a new "JSONRPC" API. Basic
Add JSON based alternative to XMLRPC
XMLRPC is a rather outdated and old-fashioned protocol not much in use anymore. Developers prefer simpler, JSON based APIs.
This adds a new "JSONRPC" API. Basically it exposes exactly the same method calls as the XMLRPC API but using JSON instead of XML. It's not a classical REST API, but should be just as easy to use for developers.
Here is an example call using CURL:
curl http://localhost/dokuwiki/lib/exe/jsonrpc.phs \ -H 'Content-Type: application/json' \ -H "Authorization: Bearer $token" \ -d '["wiki"]'
Please note that the above uses the token auth implemented in #2432. Authentication via basic auth or cookies would work as well.
show more ...
|