tigefa4u projects Trac

Improvements to the CSRF protection:
* Only pass the body of `POST` requests to `cgi.FieldStorage` if the request content type corresponds to a form submission.
* Only require the form token for `POST` requests with a content type corresponding to a form submission, fixing XML-RPC (#4122) etc. in a more generic fashion (compared to [4243]).
* The form token cookie is no longer persistent; it is now deleted when the browser session is closed/reset.

Use proper XPath pattern in layout templates.

Always save the `repository_dir` if it is not already saved, and not only on `resync` operations. Fixes #4137.

While navigating in the TracBrowser, the current ''sort order'' is retained. Fixes #1207. Thanks to adeason for the original patch.

With the Changeset ITimelineProvider, only show the changeset number in the title.

MercurialPlugin for [milestone:0.10]: fixed setup.py information.

MercurialPlugin: basicly working version for [milestone:0.11] (`datetime` fixes)

MercurialPlugin: start a branch for [milestone:0.11] compatibility

Added a `raw-attachment:<filename>:<type>:<id>` TracLinks for getting access to attached files using the raw format.

This goes together with the `/raw-attachment` URL prefix, which can be substituted to `/attachment` to get direct access to the content of the attachment. This kind of URLs are now used by the ''Original Format'' alternate download links.

This interacts better with IExplorer and Firefox extensions such as ''PDF Download'' (fixes #2974).

Use `req` in the few remaining `wiki_to_oneliner` calls. Fixes #4138.