Got ACL scope logic working again and began enforcing it. Breaking API change: assigning page title with $template->tpl_strings['PAGE_NAME'] will no longer work, use $template->assign_vars(). Workaround may be added later. Test for assign_vars method if compatibility needed. Added namespace processor API (non-breaking change). Several other things tweaked around as well.

Fixed some plugin compatibility issues seen in Nuggie

Updated image tag parser a bit. Handles recursion of brackets properly now, allows custom parameters from plugins, and takes parameters in any order due to new keyword-based parser

A bit of UX improvement to upgrade UI; updated readme for 1.1.4

Actually made the "prevent search indexing" switch work. Needs to be merged with stable.

Made ajaxReset() call the actual requested title instead of effective title; fixed (again) template compiler bug not matching certain tags (probably PCRE bug)

[YSlow experimental] Moved jsres.php include to bottom of the body in oxygen

Updated version number metadata in system plugin files; added some comments and removed unused code from index.php and includes/graphs.php

First test of rank manager interface, not currently capable of doing anything interesting (fills form with placeholder data); strings are in an earlier commit

Got initial CSRF token framework implemented and sample implementation added in Special:Logout; removing Javascript compression engine from aggressive_optimize_html() and instead calling JavascriptCompressor class from js-compressor.php

Removed remaining references to enano.homelinux.org

Added re-import function to plugin manager

[YSlow] Added Expires header on jsres.php

Fixed some GD detection bugs with freecap

Modified $template->init_vars() to pivot to local page metadata and permissions from a PageProcessor object instead of global data from $paths and permissions from $session to allow redirects to affect on-page controls as well as the actual content (only partially complete, protection and several other elements still need to be localized)

More work done on effective permissions API, namely reporting of page group and usergroup names

Added user preference for disabling visual effects in Javascript applets; added re-import button to installed plugins

Revamped some ACL code and added effective permissions calculation code into session manager

Merged in the word_lcase column (finally)

Moved some more images into sprites for Oxygen

Minified some JS files using YUI compressor

Added ability to delete the draft revision; [SECURITY] fixed lack of permission check on draft save; renamed messagebox() constructor to MessageBox() (backward compat. maintained)

Added source and compiled images for Mint's sprites

Re-synced Mint style from the Oxygen theme

Added ETag on TinyMCE gzip; changed ETag format for standard pages so as to include user and login info to control caching when logged in or out

Switched Oxygen to use CSS sprites for faster loading (CSS changes were in a past commit, only adding image files here)

Add standard header comment block and date of changes to tiny_mce_gzip to conform to GPL/LGPL

Added TinyMCE compression support and made some supporting modifications to common.php