Good Morning! This are the git changes for DokuWiki committed yesterday. Please test them and report bugs. --------------------------------------------------------------------- http://github.com/splitbrain/dokuwiki/commit/204b27c8e0c1bcfa6810ee45bd12fda3f5d83960 Author: Michael Hamann <michael[at]content-space.de> Date: Sun Jan 16 22:23:54 2011 +0100 Fix getBaseURL for literal IPv6 addresses in URLs (RFC 2732) + test case http://github.com/splitbrain/dokuwiki/commit/1b052f5cb72bee256af579602cbbed59492b2759 Author: Andreas Gohr <andi[at]splitbrain.org> Date: Sun Jan 16 19:29:03 2011 +0100 increase indexer version to reforce rebuild for the new title index http://github.com/splitbrain/dokuwiki/commit/dbd545d51b77a8684d6790ee5283b520884dd79f Author: Andreas Gohr <andi[at]splitbrain.org> Date: Sun Jan 16 18:46:26 2011 +0100 increased msg count http://github.com/splitbrain/dokuwiki/commit/eff795ac6482d5885761f6688ce183c66becd7e1 Author: Michael Hamann <michael[at]content-space.de> Date: Sun Jan 16 13:30:49 2011 +0100 Fix several security issues in the XML-RPC interface For locks and getRevisions there hasn't been any acl check. In many other cases the id hadn't been cleaned before the acl check was done which means that many acl rules that should be applied weren't applied. So e.g. when you have read permissions for the root namespace but not for a subnamespace you could add a leading ":" and the permissions for the root namespace will be used instead of the permissions for the subnamespace. This did not apply to writing pages and reading media files, but writing and deleting media files have been concerned as well as reading both plain and html versions of pages. This only concerns installations where XML-RPC is enabled (default is disabled) and XML-RPC is allowed for all or untrusted users. http://github.com/splitbrain/dokuwiki/commit/876d3278dce690fbf6a38e29a82e8bad24813fe7 Author: Andreas Gohr <andi[at]splitbrain.org> Date: Sun Jan 16 11:25:46 2011 +0100 Revert "tmp: disable notices in doku.php" This reverts commit 58a22bd0570451af9e62b659343dd47a26bacb3f. It was accidentally pushed to the repo. --------------------------------------------------------------------- You can download individual diffs or patches by appending .diff or .patch to the given commit URLs above. Bye, your git changelog mailer -- DokuWiki mailing list - more info at http://www.dokuwiki.org/mailinglist