| f8b4ea0a | 30-Jun-2026 |
Andreas Gohr <andi@splitbrain.org> |
Version upped |
| 0aa34e23 | 30-Jun-2026 |
Andreas Gohr <gohr@cosmocode.de> |
Resolve configured paths to absolute to fix wiki dir protection (#50)
Relative roots (e.g. "firmware") never matched the absolute DOKU_INC, so isWikiControlled() was silently bypassed and files insi
Resolve configured paths to absolute to fix wiki dir protection (#50)
Relative roots (e.g. "firmware") never matched the absolute DOKU_INC, so isWikiControlled() was silently bypassed and files inside the DokuWiki directory could be served, circumventing ACLs. Relative paths also resolved against the current working directory, which differs between doku.php (wiki root) and file.php (plugin dir) - hence listing worked while downloads failed with "Path not readable".
Paths are now resolved to absolute (relative ones against DOKU_INC) before any filesystem access and before the wiki/data dir comparison, making behaviour cwd-independent and the guard effective. Also fixes the always-relative savedir default and the doubled-slash (%2F%2F) in generated file URLs.
show more ...
|
| 83e348f3 | 03-Jul-2024 |
Andreas Gohr <andi@splitbrain.org> |
Version upped |
| 23c781f8 | 03-Jul-2024 |
Andreas Gohr <andi@splitbrain.org> |
abort early when no paths are configured |
| 9ad59123 | 03-Apr-2024 |
Andreas Gohr <andi@splitbrain.org> |
Version upped |
| 202f571c | 03-Apr-2024 |
splitbrain <86426+splitbrain@users.noreply.github.com> |
Automatic code style fixes |
| e82754c5 | 03-Apr-2024 |
Andreas Gohr <andi@splitbrain.org> |
prevent access of wiki files
This prevents the crawler to descent into the wiki directory or data directory, even when for some reason a higher up directory was made accessible. This should prevent
prevent access of wiki files
This prevents the crawler to descent into the wiki directory or data directory, even when for some reason a higher up directory was made accessible. This should prevent the circumvention of ACLs and prevent access to sensitive data like user password hashes etc.
show more ...
|
| 55e6f8f9 | 03-Apr-2024 |
Andreas Gohr <andi@splitbrain.org> |
fix default list separator. fixes #43 |
| e208762b | 13-Mar-2024 |
Andreas Gohr <andi@splitbrain.org> |
Version upped |
| 46bd41a8 | 13-Mar-2024 |
splitbrain <86426+splitbrain@users.noreply.github.com> |
Automatic code style fixes |
| d6a45e5c | 13-Mar-2024 |
Andreas Gohr <andi@splitbrain.org> |
ignore typical temporary files when listing directories
Operating systems love to cluter the file system with all kinds of cruft. This adds a gitignore like config to skip those files when listing f
ignore typical temporary files when listing directories
Operating systems love to cluter the file system with all kinds of cruft. This adds a gitignore like config to skip those files when listing files.
show more ...
|
| 5a77ba3a | 04-Mar-2024 |
Andreas Gohr <andi@splitbrain.org> |
Version upped |
| 1d52ebc3 | 27-Feb-2024 |
Andreas Gohr <andi@splitbrain.org> |
fix mail in plugin.info |
| d64cc5d9 | 27-Feb-2024 |
Andreas Gohr <andi@splitbrain.org> |
added deleted.files |
| e9fa3449 | 27-Feb-2024 |
Andreas Gohr <andi@splitbrain.org> |
removed obsolete javascript
|
| afea4226 | 27-Feb-2024 |
Andreas Gohr <andi@splitbrain.org> |
removed obsolete configs and language strings |
| 75a1469d | 27-Feb-2024 |
Andreas Gohr <andi@splitbrain.org> |
readme cleanup |
| 05f444a4 | 27-Feb-2024 |
Andreas Gohr <andi@splitbrain.org> |
style cleanup |
| 1eeb87d7 | 27-Feb-2024 |
Andreas Gohr <andi@splitbrain.org> |
adjust tests
This could really use some more tests but this has to suffice for now. |
| 28af4b67 | 27-Feb-2024 |
Andreas Gohr <andi@splitbrain.org> |
Major Refactoring (will need some cleanup)
This refactors the plugin from one mega syntax file into multiple classes.
The plugin now focuses on one usecase: listing files that are external to the w
Major Refactoring (will need some cleanup)
This refactors the plugin from one mega syntax file into multiple classes.
The plugin now focuses on one usecase: listing files that are external to the wiki and making them downloadable. All other usecases have been dropped. Also a bunch of other options have been dropped.
A new dispatcher makes it possible to deliver files without the need to have the webserver pointing at them.
show more ...
|
| 1c9be825 | 26-Feb-2024 |
Andreas Gohr <andi@splitbrain.org> |
initial automatic cleanup |
| 31b4eb67 | 09-Nov-2020 |
Andreas Gohr <andi@splitbrain.org> |
Version upped |
| 5cdac8ec | 27-Sep-2020 |
lpaulsen93 <lars_paulsen@web.de> |
Removed useless/deprecated code |
| 41ca2bd3 | 19-Sep-2020 |
lpaulsen93 <lars_paulsen@web.de> |
Use '$renderer->nocache()' |
| 6ddd45c3 | 31-May-2018 |
Lars Paulsen <lars_paulsen@web.de> |
Added new option 'showcreator'. See #28.
If activated an additional column will be displayed showing the DokuWiki user which created the file. Only works if option 'direct' is set to '0'. |