Changes in xhtml.php

2848662ba8eeff5c4027b53684449d6d492c1f43 - �� Rector and PHPCS fixes

Thu, 25 Jun 2026 19:48:58 +0000

�� Rector and PHPCS fixes List of files: /dokuwiki/inc/parser/xhtml.php

8ced0cff50068ab58ee04b5e3acf7edd6646c158 - Merge pull request #4636 from dokuwiki/gfm

Thu, 25 Jun 2026 07:41:13 +0000

Merge pull request #4636 from dokuwiki/gfmAdd native Markdown parsing List of files: /dokuwiki/inc/parser/xhtml.php

b73ece99c18919754d993a1d1f5cb27140555705 - Merge branch 'master' into gfm

Wed, 10 Jun 2026 17:07:18 +0000

Merge branch 'master' into gfm* master: �� Rector and PHPCS fixes �� Update deleted files Make common_pageinfo tests independent of execution order Translation update (sk) chore: adjust overlong line fix(auth): scope media ACL checks to the namespace refactor(search): extract LegacyIndexer wrapper for BC contract Translation update (ro) fix(authad): avoid warning when initAdLdap is called before opts is populated fix(infoutils): fix synology os-release file parsing remove valid_input_set(), inline the only remaining callers Update copyright year in README fix(mail): keep '&' intact in mailto links with multiple query params# Conflicts:# inc/Parsing/ParserMode/Internallink.php List of files: /dokuwiki/inc/parser/xhtml.php

795d8419571027e05147f118ca35da5c70251a7d - Read the code block download offset as an integer

Sat, 06 Jun 2026 19:34:42 +0000

Read the code block download offset as an integerThe named code/file block download link reads the codeblockOffsetrequest parameter and adds it to the current block index to build theexport link. The value was read as a string and then used in arithmetic.On PHP 8 a non-numeric value turns that addition into a string + intoperation, which throws a TypeError and produces a fatal error whenrendering any page that contains a named code or file block.The offset is now read with $INPUT->int(), which yields 0 for absent,empty or non-numeric input and the integer value otherwise, so thearithmetic is always int + int. The has() guard and zero initialiserare no longer needed. List of files: /dokuwiki/inc/parser/xhtml.php

73dc0a8919857718a3b64a4c0741b57580a34b2a - fix(mail): keep '&' intact in mailto links with multiple query params

Wed, 06 May 2026 21:21:37 +0000

fix(mail): keep '&' intact in mailto links with multiple query paramsMove the email-handling helpers (obfuscate, mail_isvalid,mail_quotedprintable_encode, mail_setup) out of the proceduralinc/mail.php into a namespaced dokuwiki\MailUtils class plus a newMailer::configInit(), and add a separate MailUtils::obfuscateUrl() forthe mailto-href context.The xhtml renderer and PluginTrait now build the link label and thehref separately: the address half is run through the mailguardobfuscation, the query string is preserved verbatim with only HTMLescaping applied. This fixes #1690 — in 'visible' mode the previouscode rawurlencoded the entire address+query, turning '?' into '%3F' andbreaking multi-parameter mailto links; in all modes the query string isno longer mangled by the [at]/[dot] substitution.Core call sites (Mailer, auth, LegacyApiCore, common, the xhtmlrenderer, the parser, the bundled config/styling/usermanager plugins)are migrated to MailUtils directly. The old top-level functions andPREG_PATTERN_VALID_EMAIL constant remain as deprecated shims withrector mappings.Tests for obfuscate / mail_isvalid / mail_quotedprintable_encode areconsolidated into a single _test/tests/MailUtilsTest.php and extendedwith regression coverage for the multi-parameter, double-escape andURL-shape cases.Closes #1690Replaces #1964 List of files: /dokuwiki/inc/parser/xhtml.php

f7c6e4acc95e3c5c24a819b2149a2bf3a7668f11 - add listo_open_start sibling method for GFM start numbers

Thu, 30 Apr 2026 08:11:04 +0000

add listo_open_start sibling method for GFM start numbersReverts the listo_open signature widening from 5a2118acc and insteadadds a sibling method `listo_open_start($start = 1)` on the rendererhierarchy. The base default delegates to listo_open() so renderersthat don't override it still produce a valid (but unnumbered) list;xhtml's override emits

rule. List of files: /dokuwiki/inc/parser/xhtml.php

5a2118accdef61a7716b85c1da1e7c8e27b3bb62 - add `$start` parameter to listo_open

Tue, 28 Apr 2026 06:20:44 +0000

add `$start` parameter to listo_openDoku_Renderer::listo_open() is now listo_open($classes = null, $start = 1),with the same signature on the metadata and XHTML renderers. The XHTMLrenderer emits start="N" only when $start is not 1, so existingordered-list output is unchanged.Used by the upcoming GfmListblock to implement GFM's ordered-list startrule (`5. foo` → `

`). Plugin renderers that overridelisto_open keep working, since PHP lets overrides omit added-with-defaultparameters. List of files: /dokuwiki/inc/parser/xhtml.php

8719732d06ab7306149725c7c5ea71deb8ff0382 - add GfmHeader for ATX headings (`# text` through `###### text`)

Wed, 22 Apr 2026 08:50:19 +0000

add GfmHeader for ATX headings (`# text` through `###### text`)Opener must sit at column 0. GFM tolerates 0-3 spaces before the `#`but that collides with DokuWiki's 2-space-indent preformatted block,so the tolerance is dropped rather than plumbed across modes.Widen the XHTML renderer's section-node tracker from 5 slots to 6 soh6 doesn't hit "Undefined array key 5". Extend GfmSpecTest's HTMLnormalizer to strip DokuWiki's section-div wrappers, section-editcomments, and header id/class attributes so heading spec examplescan validate semantic correctness. List of files: /dokuwiki/inc/parser/xhtml.php

093fe67e98c0cdb4b73fd46938e49b64971483c2 - updated rector and applied it

Sat, 07 Mar 2026 20:26:13 +0000

updated rector and applied it List of files: /dokuwiki/inc/parser/xhtml.php

0e11cf251173f77351d0f27aca8ef2bd77a92ef0 - Typo in the word associative

Wed, 27 Nov 2024 02:01:50 +0000

Typo in the word associative List of files: /dokuwiki/inc/parser/xhtml.php

db9267247e06d4aae1a33463c71b2c22d7f7a2a7 - Replace strftime with Intl ICU. Fixes #3573

Fri, 26 Jan 2024 18:34:12 +0000

Replace strftime with Intl ICU. Fixes #3573This uses a class that maps strftime placeholders to the appropriate ICUpatterns. I am using the fallback-intl branch here which provides anEnglish-only fallback when the intl extension is not available.Core has only two places where strftime is used: dformat() and theSimplePie feed parser. Both are adjusted with this patch. For the lattera custom Item class had to be registered. For better separation all ourFeedParser classes have been moved to the Feed namespace where ourFeedCreator classes already reside.Note that this will currently be a degration for users without intl asit will fall back to date and not to the still available strftime. List of files: /dokuwiki/inc/parser/xhtml.php

e44b94a4bd0679ff22e14add34b60590fe7077d3 - Revert "use a dispatcher to access static image files"

Sun, 08 Sep 2024 16:15:53 +0000

Revert "use a dispatcher to access static image files"This reverts commit 944e9ba7254387adb60f253b0d8796f2276096b1.It was accidentally pused to master before review. A PR with a revertfor the revert will be pushed shortly. List of files: /dokuwiki/inc/parser/xhtml.php

944e9ba7254387adb60f253b0d8796f2276096b1 - use a dispatcher to access static image files

Sun, 08 Sep 2024 16:09:28 +0000

use a dispatcher to access static image filesThis makes it possible to replace default images in an update safe way.It also addresses the issue raised in dokuwiki/docker#16A .htaccess rewrite catches any direct accesses that might come in fromplugins. List of files: /dokuwiki/inc/parser/xhtml.php

6c16a3a9aa602bb7e269fb6d5d18e1353e17f97f - Use str_starts_with/str_ends_with

Thu, 14 Sep 2023 20:32:18 +0000

Use str_starts_with/str_ends_with List of files: /dokuwiki/inc/parser/xhtml.php

749bc7f13d5fc213945d96ad93feaab8f74a1e03 - minor cleanup in the renderers

Sat, 02 Sep 2023 09:52:36 +0000

minor cleanup in the renderers List of files: /dokuwiki/inc/parser/xhtml.php

95078f236f25cbd6aa6d3e5aae7a3f3d39de6834 - apply code sniffer rules to inc/parser as well

Sat, 02 Sep 2023 09:42:14 +0000

apply code sniffer rules to inc/parser as well List of files: /dokuwiki/inc/parser/xhtml.php

a19c9aa0217112e3ab7ebc160354c7e9fbabe8eb - recover comments in list

Wed, 30 Aug 2023 22:25:09 +0000

recover comments in list List of files: /dokuwiki/inc/parser/xhtml.php

faf3f01b9af152b16aca96437c109c41b8250689 - Apply rector fixes to inc/parser

Tue, 29 Aug 2023 15:58:44 +0000

Apply rector fixes to inc/parser List of files: /dokuwiki/inc/parser/xhtml.php

53df38b0e4465894a67a5890f74a6f5f82e827de - fix XSS in RSS syntax

Mon, 15 May 2023 06:06:00 +0000

fix XSS in RSS syntaxThe title was not correctly escaped when written to the doc in xhtmlrenderer.SimplePie does no content escaping on its own (a comment in the codeseems to suggest that that was assumed). Instead the content is passedon as-is from the feed.This patch also applies some more escaping on the description output(though it should have been relatively safe thanks to the use ofstriptags).This was discovered by @ry0tak and reported inhttps://huntr.dev/bounties/c6119106-1a5c-464c-94dd-ee7c5d0bece0/ List of files: /dokuwiki/inc/parser/xhtml.php

d5fce4941e00a7dc95e2ae64e51693f90953d592 - Merge branch 'pr/3908'

Sat, 11 Mar 2023 13:27:47 +0000

Merge branch 'pr/3908'* pr/3908: JPEGMeta: clean up exception handling Fix: Do not garbage collect the JpegMeta object after reading a tag Replace check for null with cast to string Fix: Rework error handling in JpegMeta marker reading Replace is_null() check with count() Fix: Padding in _getFixedString, log the path of damaged images Fix: PHP8-related JpegMeta.php fixes Backwards Compatibility: Don't error if finishSectionEdit is called without first startSectionEdit Fix: 'E_WARNING: Uninitialized string offset -1' on some templates Fix: 'E_WARNING: Undefined array key "_data"' List of files: /dokuwiki/inc/parser/xhtml.php