en Copyright 2025 Java http://127.0.0.1:8080/history/dokuwiki/lib/plugins/revert/admin.php#fa03edf32ab32de4cb49864b07e7a493e4c18bf9 (security) Enforce per-page edit permission in the revert pluginThe revert manager is accessible to managers, not just admins. Itsreversion loop called saveWikiText() for every submitted page id withoutchecking the per-page ACL, relying only on the manager role. A managerdenied edit on a namespace could therefore revert those pages to anolder revision or blank them entirely (low severity).The page listing already hid unreadable pages, but offered everyreadable page for reversion, including ones the manager could not edit.A hand-crafted POST could also target arbitrary ids regardless of whatthe listing showed.Each id is now cleaned and checked for edit permission before it isreverted; ids that fail the check are silently skipped. The listingadditionally only offers pages the manager actually has edit permissionon, so the form and the action agree. List of files: /dokuwiki/lib/plugins/revert/admin.php Sat, 06 Jun 2026 19:25:20 +0000 Andreas Gohr <andi@splitbrain.org> http://127.0.0.1:8080/history/dokuwiki/lib/plugins/revert/admin.php#093fe67e98c0cdb4b73fd46938e49b64971483c2 updated rector and applied it List of files: /dokuwiki/lib/plugins/revert/admin.php Sat, 07 Mar 2026 20:26:13 +0000 Andreas Gohr <andi@splitbrain.org> http://127.0.0.1:8080/history/dokuwiki/lib/plugins/revert/admin.php#e44b94a4bd0679ff22e14add34b60590fe7077d3 Revert "use a dispatcher to access static image files"This reverts commit 944e9ba7254387adb60f253b0d8796f2276096b1.It was accidentally pused to master before review. A PR with a revertfor the revert will be pushed shortly. List of files: /dokuwiki/lib/plugins/revert/admin.php Sun, 08 Sep 2024 16:15:53 +0000 Andreas Gohr <andi@splitbrain.org> http://127.0.0.1:8080/history/dokuwiki/lib/plugins/revert/admin.php#944e9ba7254387adb60f253b0d8796f2276096b1 use a dispatcher to access static image filesThis makes it possible to replace default images in an update safe way.It also addresses the issue raised in dokuwiki/docker#16A .htaccess rewrite catches any direct accesses that might come in fromplugins. List of files: /dokuwiki/lib/plugins/revert/admin.php Sun, 08 Sep 2024 16:09:28 +0000 Andreas Gohr <andi@splitbrain.org> http://127.0.0.1:8080/history/dokuwiki/lib/plugins/revert/admin.php#90fb952c4c30c09c8446076ba05991c89a3f0b01 code style: operator spacing List of files: /dokuwiki/lib/plugins/revert/admin.php Thu, 31 Aug 2023 20:38:07 +0000 Andreas Gohr <andi@splitbrain.org> http://127.0.0.1:8080/history/dokuwiki/lib/plugins/revert/admin.php#8553d24d33ab5f260c6e19959de764dd8472d438 Apply rector renames List of files: /dokuwiki/lib/plugins/revert/admin.php Wed, 30 Aug 2023 13:44:19 +0000 Andreas Gohr <andi@splitbrain.org> http://127.0.0.1:8080/history/dokuwiki/lib/plugins/revert/admin.php#54cc7aa41e0f453bd6887b0e79242a139d84a47a Apply rector fixes to the rest of lib/plugin List of files: /dokuwiki/lib/plugins/revert/admin.php Wed, 30 Aug 2023 09:45:19 +0000 Andreas Gohr <andi@splitbrain.org> http://127.0.0.1:8080/history/dokuwiki/lib/plugins/revert/admin.php#0c3a5702735953748f68955d51bb478538fb6eda split changelog classes into their own namespaceThe remaining functions in inc/changelog.php should be moved into autility class. List of files: /dokuwiki/lib/plugins/revert/admin.php Fri, 15 Jun 2018 09:45:58 +0000 Andreas Gohr <andi@splitbrain.org> http://127.0.0.1:8080/history/dokuwiki/lib/plugins/revert/admin.php#2a7fef40a3ec5483cb6f84418251f8b157c01c15 PSR-2 for revert plugin List of files: /dokuwiki/lib/plugins/revert/admin.php Fri, 11 May 2018 11:33:36 +0000 Andreas Gohr <andi@splitbrain.org> http://127.0.0.1:8080/history/dokuwiki/lib/plugins/revert/admin.php#3dc2d50c5fda9c4bf708ff4c26e266ba239af62c visibility declarations in plugins List of files: /dokuwiki/lib/plugins/revert/admin.php Fri, 27 Apr 2018 18:55:43 +0000 Andreas Gohr <andi@splitbrain.org> http://127.0.0.1:8080/history/dokuwiki/lib/plugins/revert/admin.php#64159a61e94d0ce680071c8890e144982c3a8cbe line lengths shortenedThis makes sure all files use line lenghts shorter than 120 characters.This is a quick fix. It might not always be the nicest change. List of files: /dokuwiki/lib/plugins/revert/admin.php Fri, 27 Apr 2018 17:07:43 +0000 Andreas Gohr <andi@splitbrain.org> http://127.0.0.1:8080/history/dokuwiki/lib/plugins/revert/admin.php#b4f2363aa1360136c8a826f09aaebc6505211c73 remove DOKU_INC checksThere is no need for this check, since these files should not have anymain code that is executed on direct call.Fixes PSR1.Files.SideEffects.FoundWithSymbols List of files: /dokuwiki/lib/plugins/revert/admin.php Fri, 27 Apr 2018 12:32:42 +0000 Andreas Gohr <andi@splitbrain.org> http://127.0.0.1:8080/history/dokuwiki/lib/plugins/revert/admin.php#ae614416a5d7f5cab6c5b82a0c45f587d7fa9c01 changed all input type=submit buttons to button type=submit button for better stylability List of files: /dokuwiki/lib/plugins/revert/admin.php Sun, 12 Jul 2015 18:05:43 +0000 Anika Henke <anika@selfthinker.org> http://127.0.0.1:8080/history/dokuwiki/lib/plugins/revert/admin.php#1f3b9c4577b0d0fa91c26b01caab84ab3f20e1e4 php7 compatibility: change revert plugin constructor to __construct List of files: /dokuwiki/lib/plugins/revert/admin.php Sat, 16 May 2015 17:25:26 +0000 Christopher Smith <chris@jalakai.co.uk> http://127.0.0.1:8080/history/dokuwiki/lib/plugins/revert/admin.php#047bad06fab8157452aa0dd04379a7c507b1f39f refactor PageRevisionLog into Media- and PageChangelog extending Changelog List of files: /dokuwiki/lib/plugins/revert/admin.php Thu, 21 Nov 2013 20:07:08 +0000 Gerrit Uitslag <klapinklapin@gmail.com> http://127.0.0.1:8080/history/dokuwiki/lib/plugins/revert/admin.php#f523c9718baf12a5bc99e2285bc0666796ab2a97 update function calls to changelog functions List of files: /dokuwiki/lib/plugins/revert/admin.php Wed, 20 Nov 2013 12:36:22 +0000 Gerrit Uitslag <klapinklapin@gmail.com> http://127.0.0.1:8080/history/dokuwiki/lib/plugins/revert/admin.php#2f7a0e94cadfbc1ece3bd1d3ff23483b845cd420 Fix CodeSniffer whitespace violoationsRemoved extraneous whitespace to eliminate errors reported by theSquiz.WhiteSpace.SuperfluousWhitespace sniff. List of files: /dokuwiki/lib/plugins/revert/admin.php Wed, 11 Sep 2013 05:17:43 +0000 Matt Perry <matt@mattperry.com> http://127.0.0.1:8080/history/dokuwiki/lib/plugins/revert/admin.php#0ea51e63908793de4c5d5fa2b4d82c2769fec559 Fix CodeSniffer violations for PHP filesFix violations for Generic.PHP.LowerCaseConstant.Found List of files: /dokuwiki/lib/plugins/revert/admin.php Fri, 23 Aug 2013 09:41:39 +0000 Matt Perry <matt@mattperry.com> http://127.0.0.1:8080/history/dokuwiki/lib/plugins/revert/admin.php#dc235f9689a496b476b4f3c98deb3ad746284668 Re-enable displaying the date in the revert manager (Fixes FS#2073) List of files: /dokuwiki/lib/plugins/revert/admin.php Fri, 02 Aug 2013 22:08:52 +0000 Matthias Schulte <post@lupo49.de> http://127.0.0.1:8080/history/dokuwiki/lib/plugins/revert/admin.php#19ff1b0b4db62e68869a2b375ae736b4c7a1fe65 fixed use of removed plugin function in revert plugin (FS#2744) List of files: /dokuwiki/lib/plugins/revert/admin.php Sat, 09 Mar 2013 13:47:53 +0000 Anika Henke <anika@selfthinker.org>