Skip to content
Snippets Groups Projects
  1. Dec 21, 2010
  2. Dec 18, 2010
  3. Dec 13, 2010
  4. Dec 12, 2010
  5. Dec 10, 2010
    • Michael Hamann's avatar
      preg_quote namespaces in auth_aclcheck · 3e304b55
      Michael Hamann authored
      Like ids namespaces are now preg_quoted in the acl check (and therefore
      the escaping of "*" has been removed). When plugins call the ACL check
      function with strange ids the regex fails otherwise (in the case of the
      include plugin errors like "Warning: preg_grep() [function.preg-grep]:
      Compilation failed: missing terminating ] for character class at offset
      47" have been reported by two users).
      
      I've run the acl tests after this change and everything passes so this
      shouldn't break anything but please test this especially with protected
      wikis as this change modifies the code that handles namespace
      permissions. Furthermore permissions for a namespace foobar are no
      longer applied to namespaces with names like foo.ar, I hope nobody has
      used that "feature".
      
      When you are using per-user namespaces, user registration is open and
      either write or read protection for these namespaces is important to
      you this is a security fix for you: When someone wants to get access to
      the namespace of a user "foo.bar" he can register as "fooxbar" (where
      "x" is an arbitrary character) and will have access to the user
      namespace of the user "foo.bar" as when a page in "foo.bar" is checked
      it will match the rule for "fooxbar".
      3e304b55
    • Andreas Gohr's avatar
      added missing files for popularity plugin · 8596046d
      Andreas Gohr authored
      8596046d
  6. Dec 09, 2010
  7. Dec 08, 2010
    • Andreas Gohr's avatar
    • Andreas Gohr's avatar
      added auth_isMember() · d6dc956f
      Andreas Gohr authored
      This function abstracts checking a given user and her groups against a
      given member list (as used in the superuser and manager options).
      
      It is also used in auth_isManager() and auth_isAdmin(), unlike the
      previous function, this one skips the nameencode step as it should be
      unnessary here (all input is given decoded).
      
      The test cases where extended by some non-ID user and group names.
      
      People with non-plain auth backends should check that their
      administrator and manager setups still work as expected
      d6dc956f
    • Andreas Gohr's avatar
      fixed indent · 5b72404c
      Andreas Gohr authored
      5b72404c
  8. Dec 07, 2010
    • Andreas Gohr's avatar
      Make baseonly work in allowedModes · 9fa736b0
      Andreas Gohr authored
      This makes it possible to have modes that do accept headers
      (baseonly) in the parser.
      
      Related test cases are still running through but I'm not 100% sure
      I did not break something here. So it should be tested a bit more.
      
      This patch will allow plugins to wrap multiple sections, however it
      also makes it possible to easily break XHTML validity, because
      headers also open and close sections, so plugin authors need to be
      aware!
      
      In case you wonder: this patch is not about allowing formatting
      inside headers.
      9fa736b0
  9. Dec 06, 2010
  10. Dec 02, 2010
  11. Nov 30, 2010
  12. Nov 29, 2010
  13. Nov 26, 2010
    • Michael Hamann's avatar
      Fix for $conf['breadcrumbs'] < 0, FS#2107 · 48714142
      Michael Hamann authored
      This fixes an infinite loop in breadcrumbs() and makes the behaviors in
      all places where breadcrumbs are used consistent so that non-numeric
      values, values < 0 and 0 are treated the same way.
      48714142
  14. Nov 24, 2010
  15. Nov 22, 2010
    • Michael Hamann's avatar
      Render metadata when needed · 98214867
      Michael Hamann authored
      This changes fundamentally when metadata is rendered. This commit
      introduces a new cache file for every page that just contains a
      timestamp and is updated whenever the metadata of that page is rendered.
      
      Metadata is rendered when p_get_metadata is called and the last
      rendering has been before a page, metadata, configuration or renderer
      update or purge is set like in the xhtml renderer cache.
      
      Metadata is no longer automatically rendered when the xhtml renderer
      cache isn't used but will still be rendered when needed as
      p_get_metadata is called in the cache.
      
      Metadata is also no longer rendered in the indexer script when missing
      as that is already done by pageinfo() before anything else is done so
      the indexer script won't be called when there is no metadata file.
      98214867
    • Xin LI's avatar
      Fix unicode handling. · 5e1ee188
      Xin LI authored
      
      Suggested by:   MQ <antinvidia gmail com>
      
      Signed-off-by: default avatarXin LI <delphij@FreeBSD.org>
      5e1ee188
  16. Nov 21, 2010
  17. Nov 20, 2010
Loading