require allowdebug for debug output requested via URL

The debug URL parameter dumped the raw mPDF HTML and bypassed the cache for any
visitor. It is now honored from the URL only when core allowdebu

require allowdebug for debug output requested via URL

The debug URL parameter dumped the raw mPDF HTML and bypassed the cache for any
visitor. It is now honored from the URL only when core allowdebug is enabled;
the config/programmatic path stays trusted.

show more ...

fix config attrbutes and extend tests

Added tests

These tests have been initially LLM written, I went through each of them
to make sure they make sense and fixed what I thought needed fixing.

However coverage is still not great and sho

Added tests

These tests have been initially LLM written, I went through each of them
to make sure they make sense and fixed what I thought needed fixing.

However coverage is still not great and should be improved in the
future.

show more ...