New translations errors.php (French)

New translations preferences.php (Swedish)
New translations entities.php (Swedish)
2026-02-05 08:39:55 +03:00 · 2026-02-04 14:44:44 +00:00 · 2026-02-04 05:21:00 +00:00 · 2026-02-04 05:20:59 +00:00 · 2026-02-01 23:26:16 +00:00 · 2026-02-01 23:26:14 +00:00
89 changed files with 616 additions and 390 deletions
--- a/.github/translators.txt
+++ b/.github/translators.txt
@@ -528,3 +528,5 @@ serinf-lauza :: French
 Diyan Nikolaev (nikolaev.diyan) :: Bulgarian
 Shadluk Avan (quldosh) :: Uzbek
 Marci (MartonPoto) :: Hungarian
+Michał Sadurski (wheeskeey) :: Polish
+JanDziaslo :: Polish
--- a/app/Activity/Models/Comment.php
+++ b/app/Activity/Models/Comment.php
@@ -82,7 +82,7 @@ class Comment extends Model implements Loggable, OwnableInterface

    public function safeHtml(): string
    {
-        return HtmlContentFilter::removeScriptsFromHtmlString($this->html ?? '');
+        return HtmlContentFilter::removeActiveContentFromHtmlString($this->html ?? '');
    }

    public function jointPermissions(): HasMany
--- a/app/Entities/Tools/EntityHtmlDescription.php
+++ b/app/Entities/Tools/EntityHtmlDescription.php
@@ -50,7 +50,7 @@ class EntityHtmlDescription
            return $html;
        }

-        return HtmlContentFilter::removeScriptsFromHtmlString($html);
+        return HtmlContentFilter::removeActiveContentFromHtmlString($html);
    }

    public function getPlain(): string
--- a/app/Entities/Tools/PageContent.php
+++ b/app/Entities/Tools/PageContent.php
@@ -318,7 +318,7 @@ class PageContent
        }

        if (!config('app.allow_content_scripts')) {
-            HtmlContentFilter::removeScriptsFromDocument($doc);
+            HtmlContentFilter::removeActiveContentFromDocument($doc);
        }

        return $doc->getBodyInnerHtml();
--- a/app/Http/Middleware/ApiAuthenticate.php
+++ b/app/Http/Middleware/ApiAuthenticate.php
@@ -17,7 +17,7 @@ class ApiAuthenticate
    public function handle(Request $request, Closure $next)
    {
        // Validate the token and it's users API access
-        $this->ensureAuthorizedBySessionOrToken();
+        $this->ensureAuthorizedBySessionOrToken($request);

        return $next($request);
    }
@@ -28,22 +28,28 @@ class ApiAuthenticate
     *
     * @throws ApiAuthException
     */
-    protected function ensureAuthorizedBySessionOrToken(): void
+    protected function ensureAuthorizedBySessionOrToken(Request $request): void
    {
-        // Return if the user is already found to be signed in via session-based auth.
-        // This is to make it easy to browser the API via browser after just logging into the system.
-        if (!user()->isGuest() || session()->isStarted()) {
+        // Use the active user session already exists.
+        // This is to make it easy to explore API endpoints via the UI.
+        if (session()->isStarted()) {
+            // Ensure the user has API access permission
            if (!$this->sessionUserHasApiAccess()) {
                throw new ApiAuthException(trans('errors.api_user_no_api_permission'), 403);
            }

+            // Only allow GET requests for cookie-based API usage
+            if ($request->method() !== 'GET') {
+                throw new ApiAuthException(trans('errors.api_cookie_auth_only_get'), 403);
+            }
+
            return;
        }

        // Set our api guard to be the default for this request lifecycle.
        auth()->shouldUse('api');

-        // Validate the token and it's users API access
+        // Validate the token and its users API access
        auth()->authenticate();
    }

--- a/app/Theming/CustomHtmlHeadContentProvider.php
+++ b/app/Theming/CustomHtmlHeadContentProvider.php
@@ -50,7 +50,7 @@ class CustomHtmlHeadContentProvider
        $hash = md5($content);

        return $this->cache->remember('custom-head-export:' . $hash, 86400, function () use ($content) {
-            return HtmlContentFilter::removeScriptsFromHtmlString($content);
+            return HtmlContentFilter::removeActiveContentFromHtmlString($content);
        });
    }

--- a/app/Util/HtmlContentFilter.php
+++ b/app/Util/HtmlContentFilter.php
@@ -9,9 +9,11 @@ use DOMNodeList;
 class HtmlContentFilter
 {
    /**
-     * Remove all the script elements from the given HTML document.
+     * Remove all active content from the given HTML document.
+     * This aims to cover anything which can dynamically deal with, or send, data
+     * like any JavaScript actions or form content.
     */
-    public static function removeScriptsFromDocument(HtmlDocument $doc)
+    public static function removeActiveContentFromDocument(HtmlDocument $doc): void
    {
        // Remove standard script tags
        $scriptElems = $doc->queryXPath('//script');
@@ -21,7 +23,7 @@ class HtmlContentFilter
        $badLinks = $doc->queryXPath('//*[' . static::xpathContains('@href', 'javascript:') . ']');
        static::removeNodes($badLinks);

-        // Remove forms with calls to JavaScript URI
+        // Remove elements with form-like attributes with calls to JavaScript URI
        $badForms = $doc->queryXPath('//*[' . static::xpathContains('@action', 'javascript:') . '] | //*[' . static::xpathContains('@formaction', 'javascript:') . ']');
        static::removeNodes($badForms);

@@ -47,25 +49,71 @@ class HtmlContentFilter
        // Remove 'on*' attributes
        $onAttributes = $doc->queryXPath('//@*[starts-with(name(), \'on\')]');
        static::removeAttributes($onAttributes);
+
+        // Remove form elements
+        $formElements = ['form', 'fieldset', 'button', 'textarea', 'select'];
+        foreach ($formElements as $formElement) {
+            $matchingFormElements = $doc->queryXPath('//' . $formElement);
+            static::removeNodes($matchingFormElements);
+        }
+
+        // Remove non-checkbox inputs
+        $inputsToRemove = $doc->queryXPath('//input');
+        /** @var DOMElement $input */
+        foreach ($inputsToRemove as $input) {
+            $type = strtolower($input->getAttribute('type'));
+            if ($type !== 'checkbox') {
+                $input->parentNode->removeChild($input);
+            }
+        }
+
+        // Remove form attributes
+        $formAttrs = ['form', 'formaction', 'formmethod', 'formtarget'];
+        foreach ($formAttrs as $formAttr) {
+            $matchingFormAttrs = $doc->queryXPath('//@' . $formAttr);
+            static::removeAttributes($matchingFormAttrs);
+        }
    }

    /**
-     * Remove scripts from the given HTML string.
+     * Remove active content from the given HTML string.
+     * This aims to cover anything which can dynamically deal with, or send, data
+     * like any JavaScript actions or form content.
     */
-    public static function removeScriptsFromHtmlString(string $html): string
+    public static function removeActiveContentFromHtmlString(string $html): string
    {
        if (empty($html)) {
            return $html;
        }

        $doc = new HtmlDocument($html);
-        static::removeScriptsFromDocument($doc);
+        static::removeActiveContentFromDocument($doc);

        return $doc->getBodyInnerHtml();
    }

    /**
-     * Create a xpath contains statement with a translation automatically built within
+     * Alias using the old method name to avoid potential compatibility breaks during patch release.
+     * To remove in future feature release.
+     * @deprecated Use removeActiveContentFromDocument instead.
+     */
+    public static function removeScriptsFromDocument(HtmlDocument $doc): void
+    {
+        static::removeActiveContentFromDocument($doc);
+    }
+
+    /**
+     * Alias using the old method name to avoid potential compatibility breaks during patch release.
+     * To remove in future feature release.
+     * @deprecated Use removeActiveContentFromHtmlString instead.
+     */
+    public static function removeScriptsFromHtmlString(string $html): string
+    {
+        return static::removeActiveContentFromHtmlString($html);
+    }
+
+    /**
+     * Create an x-path 'contains' statement with a translation automatically built within
     * to affectively search in a cases-insensitive manner.
     */
    protected static function xpathContains(string $property, string $value): string
--- a/composer.lock
+++ b/composer.lock
@@ -62,16 +62,16 @@
        },
        {
            "name": "aws/aws-sdk-php",
-            "version": "3.369.17",
+            "version": "3.369.22",
            "source": {
                "type": "git",
                "url": "https://github.com/aws/aws-sdk-php.git",
-                "reference": "8bdccd2f8e54c5cd170b22f52414171e19226fd1"
+                "reference": "fe83cbc3adb5ed384179ac6d63531aadde0198e3"
            },
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/aws/aws-sdk-php/zipball/8bdccd2f8e54c5cd170b22f52414171e19226fd1",
-                "reference": "8bdccd2f8e54c5cd170b22f52414171e19226fd1",
+                "url": "https://api.github.com/repos/aws/aws-sdk-php/zipball/fe83cbc3adb5ed384179ac6d63531aadde0198e3",
+                "reference": "fe83cbc3adb5ed384179ac6d63531aadde0198e3",
                "shasum": ""
            },
            "require": {
@@ -153,9 +153,9 @@
            "support": {
                "forum": "https://github.com/aws/aws-sdk-php/discussions",
                "issues": "https://github.com/aws/aws-sdk-php/issues",
-                "source": "https://github.com/aws/aws-sdk-php/tree/3.369.17"
+                "source": "https://github.com/aws/aws-sdk-php/tree/3.369.22"
            },
-            "time": "2026-01-21T19:09:32+00:00"
+            "time": "2026-01-28T19:19:00+00:00"
        },
        {
            "name": "bacon/bacon-qr-code",
@@ -1739,16 +1739,16 @@
        },
        {
            "name": "laravel/framework",
-            "version": "v12.48.1",
+            "version": "v12.49.0",
            "source": {
                "type": "git",
                "url": "https://github.com/laravel/framework.git",
-                "reference": "0f0974a9769378ccd9c9935c09b9927f3a606830"
+                "reference": "4bde4530545111d8bdd1de6f545fa8824039fcb5"
            },
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/laravel/framework/zipball/0f0974a9769378ccd9c9935c09b9927f3a606830",
-                "reference": "0f0974a9769378ccd9c9935c09b9927f3a606830",
+                "url": "https://api.github.com/repos/laravel/framework/zipball/4bde4530545111d8bdd1de6f545fa8824039fcb5",
+                "reference": "4bde4530545111d8bdd1de6f545fa8824039fcb5",
                "shasum": ""
            },
            "require": {
@@ -1957,20 +1957,20 @@
                "issues": "https://github.com/laravel/framework/issues",
                "source": "https://github.com/laravel/framework"
            },
-            "time": "2026-01-20T16:12:36+00:00"
+            "time": "2026-01-28T03:40:49+00:00"
        },
        {
            "name": "laravel/prompts",
-            "version": "v0.3.10",
+            "version": "v0.3.11",
            "source": {
                "type": "git",
                "url": "https://github.com/laravel/prompts.git",
-                "reference": "360ba095ef9f51017473505191fbd4ab73e1cab3"
+                "reference": "dd2a2ed95acacbcccd32fd98dee4c946ae7a7217"
            },
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/laravel/prompts/zipball/360ba095ef9f51017473505191fbd4ab73e1cab3",
-                "reference": "360ba095ef9f51017473505191fbd4ab73e1cab3",
+                "url": "https://api.github.com/repos/laravel/prompts/zipball/dd2a2ed95acacbcccd32fd98dee4c946ae7a7217",
+                "reference": "dd2a2ed95acacbcccd32fd98dee4c946ae7a7217",
                "shasum": ""
            },
            "require": {
@@ -2014,9 +2014,9 @@
            "description": "Add beautiful and user-friendly forms to your command-line applications.",
            "support": {
                "issues": "https://github.com/laravel/prompts/issues",
-                "source": "https://github.com/laravel/prompts/tree/v0.3.10"
+                "source": "https://github.com/laravel/prompts/tree/v0.3.11"
            },
-            "time": "2026-01-13T20:29:29+00:00"
+            "time": "2026-01-27T02:55:06+00:00"
        },
        {
            "name": "laravel/serializable-closure",
@@ -2408,16 +2408,16 @@
        },
        {
            "name": "league/flysystem",
-            "version": "3.30.2",
+            "version": "3.31.0",
            "source": {
                "type": "git",
                "url": "https://github.com/thephpleague/flysystem.git",
-                "reference": "5966a8ba23e62bdb518dd9e0e665c2dbd4b5b277"
+                "reference": "1717e0b3642b0df65ecb0cc89cdd99fa840672ff"
            },
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/thephpleague/flysystem/zipball/5966a8ba23e62bdb518dd9e0e665c2dbd4b5b277",
-                "reference": "5966a8ba23e62bdb518dd9e0e665c2dbd4b5b277",
+                "url": "https://api.github.com/repos/thephpleague/flysystem/zipball/1717e0b3642b0df65ecb0cc89cdd99fa840672ff",
+                "reference": "1717e0b3642b0df65ecb0cc89cdd99fa840672ff",
                "shasum": ""
            },
            "require": {
@@ -2485,22 +2485,22 @@
            ],
            "support": {
                "issues": "https://github.com/thephpleague/flysystem/issues",
-                "source": "https://github.com/thephpleague/flysystem/tree/3.30.2"
+                "source": "https://github.com/thephpleague/flysystem/tree/3.31.0"
            },
-            "time": "2025-11-10T17:13:11+00:00"
+            "time": "2026-01-23T15:38:47+00:00"
        },
        {
            "name": "league/flysystem-aws-s3-v3",
-            "version": "3.30.1",
+            "version": "3.31.0",
            "source": {
                "type": "git",
                "url": "https://github.com/thephpleague/flysystem-aws-s3-v3.git",
-                "reference": "d286e896083bed3190574b8b088b557b59eb66f5"
+                "reference": "e36a2bc60b06332c92e4435047797ded352b446f"
            },
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/thephpleague/flysystem-aws-s3-v3/zipball/d286e896083bed3190574b8b088b557b59eb66f5",
-                "reference": "d286e896083bed3190574b8b088b557b59eb66f5",
+                "url": "https://api.github.com/repos/thephpleague/flysystem-aws-s3-v3/zipball/e36a2bc60b06332c92e4435047797ded352b446f",
+                "reference": "e36a2bc60b06332c92e4435047797ded352b446f",
                "shasum": ""
            },
            "require": {
@@ -2540,22 +2540,22 @@
                "storage"
            ],
            "support": {
-                "source": "https://github.com/thephpleague/flysystem-aws-s3-v3/tree/3.30.1"
+                "source": "https://github.com/thephpleague/flysystem-aws-s3-v3/tree/3.31.0"
            },
-            "time": "2025-10-20T15:27:33+00:00"
+            "time": "2026-01-23T15:30:45+00:00"
        },
        {
            "name": "league/flysystem-local",
-            "version": "3.30.2",
+            "version": "3.31.0",
            "source": {
                "type": "git",
                "url": "https://github.com/thephpleague/flysystem-local.git",
-                "reference": "ab4f9d0d672f601b102936aa728801dd1a11968d"
+                "reference": "2f669db18a4c20c755c2bb7d3a7b0b2340488079"
            },
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/thephpleague/flysystem-local/zipball/ab4f9d0d672f601b102936aa728801dd1a11968d",
-                "reference": "ab4f9d0d672f601b102936aa728801dd1a11968d",
+                "url": "https://api.github.com/repos/thephpleague/flysystem-local/zipball/2f669db18a4c20c755c2bb7d3a7b0b2340488079",
+                "reference": "2f669db18a4c20c755c2bb7d3a7b0b2340488079",
                "shasum": ""
            },
            "require": {
@@ -2589,9 +2589,9 @@
                "local"
            ],
            "support": {
-                "source": "https://github.com/thephpleague/flysystem-local/tree/3.30.2"
+                "source": "https://github.com/thephpleague/flysystem-local/tree/3.31.0"
            },
-            "time": "2025-11-10T11:23:37+00:00"
+            "time": "2026-01-23T15:30:45+00:00"
        },
        {
            "name": "league/html-to-markdown",
@@ -3299,16 +3299,16 @@
        },
        {
            "name": "nesbot/carbon",
-            "version": "3.11.0",
+            "version": "3.11.1",
            "source": {
                "type": "git",
                "url": "https://github.com/CarbonPHP/carbon.git",
-                "reference": "bdb375400dcd162624531666db4799b36b64e4a1"
+                "reference": "f438fcc98f92babee98381d399c65336f3a3827f"
            },
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/CarbonPHP/carbon/zipball/bdb375400dcd162624531666db4799b36b64e4a1",
-                "reference": "bdb375400dcd162624531666db4799b36b64e4a1",
+                "url": "https://api.github.com/repos/CarbonPHP/carbon/zipball/f438fcc98f92babee98381d399c65336f3a3827f",
+                "reference": "f438fcc98f92babee98381d399c65336f3a3827f",
                "shasum": ""
            },
            "require": {
@@ -3332,7 +3332,7 @@
                "phpstan/extension-installer": "^1.4.3",
                "phpstan/phpstan": "^2.1.22",
                "phpunit/phpunit": "^10.5.53",
-                "squizlabs/php_codesniffer": "^3.13.4"
+                "squizlabs/php_codesniffer": "^3.13.4 || ^4.0.0"
            },
            "bin": [
                "bin/carbon"
@@ -3375,14 +3375,14 @@
                }
            ],
            "description": "An API extension for DateTime that supports 281 different languages.",
-            "homepage": "https://carbon.nesbot.com",
+            "homepage": "https://carbonphp.github.io/carbon/",
            "keywords": [
                "date",
                "datetime",
                "time"
            ],
            "support": {
-                "docs": "https://carbon.nesbot.com/docs",
+                "docs": "https://carbonphp.github.io/carbon/guide/getting-started/introduction.html",
                "issues": "https://github.com/CarbonPHP/carbon/issues",
                "source": "https://github.com/CarbonPHP/carbon"
            },
@@ -3400,7 +3400,7 @@
                    "type": "tidelift"
                }
            ],
-            "time": "2025-12-02T21:04:28+00:00"
+            "time": "2026-01-29T09:26:29+00:00"
        },
        {
            "name": "nette/schema",
@@ -3961,16 +3961,16 @@
        },
        {
            "name": "phpseclib/phpseclib",
-            "version": "3.0.48",
+            "version": "3.0.49",
            "source": {
                "type": "git",
                "url": "https://github.com/phpseclib/phpseclib.git",
-                "reference": "64065a5679c50acb886e82c07aa139b0f757bb89"
+                "reference": "6233a1e12584754e6b5daa69fe1289b47775c1b9"
            },
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/phpseclib/phpseclib/zipball/64065a5679c50acb886e82c07aa139b0f757bb89",
-                "reference": "64065a5679c50acb886e82c07aa139b0f757bb89",
+                "url": "https://api.github.com/repos/phpseclib/phpseclib/zipball/6233a1e12584754e6b5daa69fe1289b47775c1b9",
+                "reference": "6233a1e12584754e6b5daa69fe1289b47775c1b9",
                "shasum": ""
            },
            "require": {
@@ -4051,7 +4051,7 @@
            ],
            "support": {
                "issues": "https://github.com/phpseclib/phpseclib/issues",
-                "source": "https://github.com/phpseclib/phpseclib/tree/3.0.48"
+                "source": "https://github.com/phpseclib/phpseclib/tree/3.0.49"
            },
            "funding": [
                {
@@ -4067,7 +4067,7 @@
                    "type": "tidelift"
                }
            ],
-            "time": "2025-12-15T11:51:42+00:00"
+            "time": "2026-01-27T09:17:28+00:00"
        },
        {
            "name": "pragmarx/google2fa",
@@ -5437,16 +5437,16 @@
        },
        {
            "name": "symfony/console",
-            "version": "v7.4.3",
+            "version": "v7.4.4",
            "source": {
                "type": "git",
                "url": "https://github.com/symfony/console.git",
-                "reference": "732a9ca6cd9dfd940c639062d5edbde2f6727fb6"
+                "reference": "41e38717ac1dd7a46b6bda7d6a82af2d98a78894"
            },
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/symfony/console/zipball/732a9ca6cd9dfd940c639062d5edbde2f6727fb6",
-                "reference": "732a9ca6cd9dfd940c639062d5edbde2f6727fb6",
+                "url": "https://api.github.com/repos/symfony/console/zipball/41e38717ac1dd7a46b6bda7d6a82af2d98a78894",
+                "reference": "41e38717ac1dd7a46b6bda7d6a82af2d98a78894",
                "shasum": ""
            },
            "require": {
@@ -5511,7 +5511,7 @@
                "terminal"
            ],
            "support": {
-                "source": "https://github.com/symfony/console/tree/v7.4.3"
+                "source": "https://github.com/symfony/console/tree/v7.4.4"
            },
            "funding": [
                {
@@ -5531,7 +5531,7 @@
                    "type": "tidelift"
                }
            ],
-            "time": "2025-12-23T14:50:43+00:00"
+            "time": "2026-01-13T11:36:38+00:00"
        },
        {
            "name": "symfony/css-selector",
@@ -5671,16 +5671,16 @@
        },
        {
            "name": "symfony/error-handler",
-            "version": "v7.4.0",
+            "version": "v7.4.4",
            "source": {
                "type": "git",
                "url": "https://github.com/symfony/error-handler.git",
-                "reference": "48be2b0653594eea32dcef130cca1c811dcf25c2"
+                "reference": "8da531f364ddfee53e36092a7eebbbd0b775f6b8"
            },
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/symfony/error-handler/zipball/48be2b0653594eea32dcef130cca1c811dcf25c2",
-                "reference": "48be2b0653594eea32dcef130cca1c811dcf25c2",
+                "url": "https://api.github.com/repos/symfony/error-handler/zipball/8da531f364ddfee53e36092a7eebbbd0b775f6b8",
+                "reference": "8da531f364ddfee53e36092a7eebbbd0b775f6b8",
                "shasum": ""
            },
            "require": {
@@ -5729,7 +5729,7 @@
            "description": "Provides tools to manage errors and ease debugging PHP code",
            "homepage": "https://symfony.com",
            "support": {
-                "source": "https://github.com/symfony/error-handler/tree/v7.4.0"
+                "source": "https://github.com/symfony/error-handler/tree/v7.4.4"
            },
            "funding": [
                {
@@ -5749,20 +5749,20 @@
                    "type": "tidelift"
                }
            ],
-            "time": "2025-11-05T14:29:59+00:00"
+            "time": "2026-01-20T16:42:42+00:00"
        },
        {
            "name": "symfony/event-dispatcher",
-            "version": "v7.4.0",
+            "version": "v7.4.4",
            "source": {
                "type": "git",
                "url": "https://github.com/symfony/event-dispatcher.git",
-                "reference": "9dddcddff1ef974ad87b3708e4b442dc38b2261d"
+                "reference": "dc2c0eba1af673e736bb851d747d266108aea746"
            },
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/symfony/event-dispatcher/zipball/9dddcddff1ef974ad87b3708e4b442dc38b2261d",
-                "reference": "9dddcddff1ef974ad87b3708e4b442dc38b2261d",
+                "url": "https://api.github.com/repos/symfony/event-dispatcher/zipball/dc2c0eba1af673e736bb851d747d266108aea746",
+                "reference": "dc2c0eba1af673e736bb851d747d266108aea746",
                "shasum": ""
            },
            "require": {
@@ -5814,7 +5814,7 @@
            "description": "Provides tools that allow your application components to communicate with each other by dispatching events and listening to them",
            "homepage": "https://symfony.com",
            "support": {
-                "source": "https://github.com/symfony/event-dispatcher/tree/v7.4.0"
+                "source": "https://github.com/symfony/event-dispatcher/tree/v7.4.4"
            },
            "funding": [
                {
@@ -5834,7 +5834,7 @@
                    "type": "tidelift"
                }
            ],
-            "time": "2025-10-28T09:38:46+00:00"
+            "time": "2026-01-05T11:45:34+00:00"
        },
        {
            "name": "symfony/event-dispatcher-contracts",
@@ -5984,16 +5984,16 @@
        },
        {
            "name": "symfony/finder",
-            "version": "v7.4.3",
+            "version": "v7.4.5",
            "source": {
                "type": "git",
                "url": "https://github.com/symfony/finder.git",
-                "reference": "fffe05569336549b20a1be64250b40516d6e8d06"
+                "reference": "ad4daa7c38668dcb031e63bc99ea9bd42196a2cb"
            },
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/symfony/finder/zipball/fffe05569336549b20a1be64250b40516d6e8d06",
-                "reference": "fffe05569336549b20a1be64250b40516d6e8d06",
+                "url": "https://api.github.com/repos/symfony/finder/zipball/ad4daa7c38668dcb031e63bc99ea9bd42196a2cb",
+                "reference": "ad4daa7c38668dcb031e63bc99ea9bd42196a2cb",
                "shasum": ""
            },
            "require": {
@@ -6028,7 +6028,7 @@
            "description": "Finds files and directories via an intuitive fluent interface",
            "homepage": "https://symfony.com",
            "support": {
-                "source": "https://github.com/symfony/finder/tree/v7.4.3"
+                "source": "https://github.com/symfony/finder/tree/v7.4.5"
            },
            "funding": [
                {
@@ -6048,20 +6048,20 @@
                    "type": "tidelift"
                }
            ],
-            "time": "2025-12-23T14:50:43+00:00"
+            "time": "2026-01-26T15:07:59+00:00"
        },
        {
            "name": "symfony/http-foundation",
-            "version": "v7.4.3",
+            "version": "v7.4.5",
            "source": {
                "type": "git",
                "url": "https://github.com/symfony/http-foundation.git",
-                "reference": "a70c745d4cea48dbd609f4075e5f5cbce453bd52"
+                "reference": "446d0db2b1f21575f1284b74533e425096abdfb6"
            },
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/symfony/http-foundation/zipball/a70c745d4cea48dbd609f4075e5f5cbce453bd52",
-                "reference": "a70c745d4cea48dbd609f4075e5f5cbce453bd52",
+                "url": "https://api.github.com/repos/symfony/http-foundation/zipball/446d0db2b1f21575f1284b74533e425096abdfb6",
+                "reference": "446d0db2b1f21575f1284b74533e425096abdfb6",
                "shasum": ""
            },
            "require": {
@@ -6110,7 +6110,7 @@
            "description": "Defines an object-oriented layer for the HTTP specification",
            "homepage": "https://symfony.com",
            "support": {
-                "source": "https://github.com/symfony/http-foundation/tree/v7.4.3"
+                "source": "https://github.com/symfony/http-foundation/tree/v7.4.5"
            },
            "funding": [
                {
@@ -6130,20 +6130,20 @@
                    "type": "tidelift"
                }
            ],
-            "time": "2025-12-23T14:23:49+00:00"
+            "time": "2026-01-27T16:16:02+00:00"
        },
        {
            "name": "symfony/http-kernel",
-            "version": "v7.4.3",
+            "version": "v7.4.5",
            "source": {
                "type": "git",
                "url": "https://github.com/symfony/http-kernel.git",
-                "reference": "885211d4bed3f857b8c964011923528a55702aa5"
+                "reference": "229eda477017f92bd2ce7615d06222ec0c19e82a"
            },
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/symfony/http-kernel/zipball/885211d4bed3f857b8c964011923528a55702aa5",
-                "reference": "885211d4bed3f857b8c964011923528a55702aa5",
+                "url": "https://api.github.com/repos/symfony/http-kernel/zipball/229eda477017f92bd2ce7615d06222ec0c19e82a",
+                "reference": "229eda477017f92bd2ce7615d06222ec0c19e82a",
                "shasum": ""
            },
            "require": {
@@ -6229,7 +6229,7 @@
            "description": "Provides a structured process for converting a Request into a Response",
            "homepage": "https://symfony.com",
            "support": {
-                "source": "https://github.com/symfony/http-kernel/tree/v7.4.3"
+                "source": "https://github.com/symfony/http-kernel/tree/v7.4.5"
            },
            "funding": [
                {
@@ -6249,20 +6249,20 @@
                    "type": "tidelift"
                }
            ],
-            "time": "2025-12-31T08:43:57+00:00"
+            "time": "2026-01-28T10:33:42+00:00"
        },
        {
            "name": "symfony/mailer",
-            "version": "v7.4.3",
+            "version": "v7.4.4",
            "source": {
                "type": "git",
                "url": "https://github.com/symfony/mailer.git",
-                "reference": "e472d35e230108231ccb7f51eb6b2100cac02ee4"
+                "reference": "7b750074c40c694ceb34cb926d6dffee231c5cd6"
            },
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/symfony/mailer/zipball/e472d35e230108231ccb7f51eb6b2100cac02ee4",
-                "reference": "e472d35e230108231ccb7f51eb6b2100cac02ee4",
+                "url": "https://api.github.com/repos/symfony/mailer/zipball/7b750074c40c694ceb34cb926d6dffee231c5cd6",
+                "reference": "7b750074c40c694ceb34cb926d6dffee231c5cd6",
                "shasum": ""
            },
            "require": {
@@ -6313,7 +6313,7 @@
            "description": "Helps sending emails",
            "homepage": "https://symfony.com",
            "support": {
-                "source": "https://github.com/symfony/mailer/tree/v7.4.3"
+                "source": "https://github.com/symfony/mailer/tree/v7.4.4"
            },
            "funding": [
                {
@@ -6333,20 +6333,20 @@
                    "type": "tidelift"
                }
            ],
-            "time": "2025-12-16T08:02:06+00:00"
+            "time": "2026-01-08T08:25:11+00:00"
        },
        {
            "name": "symfony/mime",
-            "version": "v7.4.0",
+            "version": "v7.4.5",
            "source": {
                "type": "git",
                "url": "https://github.com/symfony/mime.git",
-                "reference": "bdb02729471be5d047a3ac4a69068748f1a6be7a"
+                "reference": "b18c7e6e9eee1e19958138df10412f3c4c316148"
            },
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/symfony/mime/zipball/bdb02729471be5d047a3ac4a69068748f1a6be7a",
-                "reference": "bdb02729471be5d047a3ac4a69068748f1a6be7a",
+                "url": "https://api.github.com/repos/symfony/mime/zipball/b18c7e6e9eee1e19958138df10412f3c4c316148",
+                "reference": "b18c7e6e9eee1e19958138df10412f3c4c316148",
                "shasum": ""
            },
            "require": {
@@ -6357,15 +6357,15 @@
            },
            "conflict": {
                "egulias/email-validator": "~3.0.0",
-                "phpdocumentor/reflection-docblock": "<3.2.2",
-                "phpdocumentor/type-resolver": "<1.4.0",
+                "phpdocumentor/reflection-docblock": "<5.2|>=6",
+                "phpdocumentor/type-resolver": "<1.5.1",
                "symfony/mailer": "<6.4",
                "symfony/serializer": "<6.4.3|>7.0,<7.0.3"
            },
            "require-dev": {
                "egulias/email-validator": "^2.1.10|^3.1|^4",
                "league/html-to-markdown": "^5.0",
-                "phpdocumentor/reflection-docblock": "^3.0|^4.0|^5.0",
+                "phpdocumentor/reflection-docblock": "^5.2",
                "symfony/dependency-injection": "^6.4|^7.0|^8.0",
                "symfony/process": "^6.4|^7.0|^8.0",
                "symfony/property-access": "^6.4|^7.0|^8.0",
@@ -6402,7 +6402,7 @@
                "mime-type"
            ],
            "support": {
-                "source": "https://github.com/symfony/mime/tree/v7.4.0"
+                "source": "https://github.com/symfony/mime/tree/v7.4.5"
            },
            "funding": [
                {
@@ -6422,7 +6422,7 @@
                    "type": "tidelift"
                }
            ],
-            "time": "2025-11-16T10:14:42+00:00"
+            "time": "2026-01-27T08:59:58+00:00"
        },
        {
            "name": "symfony/polyfill-ctype",
@@ -7255,16 +7255,16 @@
        },
        {
            "name": "symfony/process",
-            "version": "v7.4.3",
+            "version": "v7.4.5",
            "source": {
                "type": "git",
                "url": "https://github.com/symfony/process.git",
-                "reference": "2f8e1a6cdf590ca63715da4d3a7a3327404a523f"
+                "reference": "608476f4604102976d687c483ac63a79ba18cc97"
            },
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/symfony/process/zipball/2f8e1a6cdf590ca63715da4d3a7a3327404a523f",
-                "reference": "2f8e1a6cdf590ca63715da4d3a7a3327404a523f",
+                "url": "https://api.github.com/repos/symfony/process/zipball/608476f4604102976d687c483ac63a79ba18cc97",
+                "reference": "608476f4604102976d687c483ac63a79ba18cc97",
                "shasum": ""
            },
            "require": {
@@ -7296,7 +7296,7 @@
            "description": "Executes commands in sub-processes",
            "homepage": "https://symfony.com",
            "support": {
-                "source": "https://github.com/symfony/process/tree/v7.4.3"
+                "source": "https://github.com/symfony/process/tree/v7.4.5"
            },
            "funding": [
                {
@@ -7316,20 +7316,20 @@
                    "type": "tidelift"
                }
            ],
-            "time": "2025-12-19T10:00:43+00:00"
+            "time": "2026-01-26T15:07:59+00:00"
        },
        {
            "name": "symfony/routing",
-            "version": "v7.4.3",
+            "version": "v7.4.4",
            "source": {
                "type": "git",
                "url": "https://github.com/symfony/routing.git",
-                "reference": "5d3fd7adf8896c2fdb54e2f0f35b1bcbd9e45090"
+                "reference": "0798827fe2c79caeed41d70b680c2c3507d10147"
            },
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/symfony/routing/zipball/5d3fd7adf8896c2fdb54e2f0f35b1bcbd9e45090",
-                "reference": "5d3fd7adf8896c2fdb54e2f0f35b1bcbd9e45090",
+                "url": "https://api.github.com/repos/symfony/routing/zipball/0798827fe2c79caeed41d70b680c2c3507d10147",
+                "reference": "0798827fe2c79caeed41d70b680c2c3507d10147",
                "shasum": ""
            },
            "require": {
@@ -7381,7 +7381,7 @@
                "url"
            ],
            "support": {
-                "source": "https://github.com/symfony/routing/tree/v7.4.3"
+                "source": "https://github.com/symfony/routing/tree/v7.4.4"
            },
            "funding": [
                {
@@ -7401,7 +7401,7 @@
                    "type": "tidelift"
                }
            ],
-            "time": "2025-12-19T10:00:43+00:00"
+            "time": "2026-01-12T12:19:02+00:00"
        },
        {
            "name": "symfony/service-contracts",
@@ -7492,16 +7492,16 @@
        },
        {
            "name": "symfony/string",
-            "version": "v7.4.0",
+            "version": "v7.4.4",
            "source": {
                "type": "git",
                "url": "https://github.com/symfony/string.git",
-                "reference": "d50e862cb0a0e0886f73ca1f31b865efbb795003"
+                "reference": "1c4b10461bf2ec27537b5f36105337262f5f5d6f"
            },
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/symfony/string/zipball/d50e862cb0a0e0886f73ca1f31b865efbb795003",
-                "reference": "d50e862cb0a0e0886f73ca1f31b865efbb795003",
+                "url": "https://api.github.com/repos/symfony/string/zipball/1c4b10461bf2ec27537b5f36105337262f5f5d6f",
+                "reference": "1c4b10461bf2ec27537b5f36105337262f5f5d6f",
                "shasum": ""
            },
            "require": {
@@ -7559,7 +7559,7 @@
                "utf8"
            ],
            "support": {
-                "source": "https://github.com/symfony/string/tree/v7.4.0"
+                "source": "https://github.com/symfony/string/tree/v7.4.4"
            },
            "funding": [
                {
@@ -7579,20 +7579,20 @@
                    "type": "tidelift"
                }
            ],
-            "time": "2025-11-27T13:27:24+00:00"
+            "time": "2026-01-12T10:54:30+00:00"
        },
        {
            "name": "symfony/translation",
-            "version": "v7.4.3",
+            "version": "v7.4.4",
            "source": {
                "type": "git",
                "url": "https://github.com/symfony/translation.git",
-                "reference": "7ef27c65d78886f7599fdd5c93d12c9243ecf44d"
+                "reference": "bfde13711f53f549e73b06d27b35a55207528877"
            },
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/symfony/translation/zipball/7ef27c65d78886f7599fdd5c93d12c9243ecf44d",
-                "reference": "7ef27c65d78886f7599fdd5c93d12c9243ecf44d",
+                "url": "https://api.github.com/repos/symfony/translation/zipball/bfde13711f53f549e73b06d27b35a55207528877",
+                "reference": "bfde13711f53f549e73b06d27b35a55207528877",
                "shasum": ""
            },
            "require": {
@@ -7659,7 +7659,7 @@
            "description": "Provides tools to internationalize your application",
            "homepage": "https://symfony.com",
            "support": {
-                "source": "https://github.com/symfony/translation/tree/v7.4.3"
+                "source": "https://github.com/symfony/translation/tree/v7.4.4"
            },
            "funding": [
                {
@@ -7679,7 +7679,7 @@
                    "type": "tidelift"
                }
            ],
-            "time": "2025-12-29T09:31:36+00:00"
+            "time": "2026-01-13T10:40:19+00:00"
        },
        {
            "name": "symfony/translation-contracts",
@@ -7765,16 +7765,16 @@
        },
        {
            "name": "symfony/uid",
-            "version": "v7.4.0",
+            "version": "v7.4.4",
            "source": {
                "type": "git",
                "url": "https://github.com/symfony/uid.git",
-                "reference": "2498e9f81b7baa206f44de583f2f48350b90142c"
+                "reference": "7719ce8aba76be93dfe249192f1fbfa52c588e36"
            },
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/symfony/uid/zipball/2498e9f81b7baa206f44de583f2f48350b90142c",
-                "reference": "2498e9f81b7baa206f44de583f2f48350b90142c",
+                "url": "https://api.github.com/repos/symfony/uid/zipball/7719ce8aba76be93dfe249192f1fbfa52c588e36",
+                "reference": "7719ce8aba76be93dfe249192f1fbfa52c588e36",
                "shasum": ""
            },
            "require": {
@@ -7819,7 +7819,7 @@
                "uuid"
            ],
            "support": {
-                "source": "https://github.com/symfony/uid/tree/v7.4.0"
+                "source": "https://github.com/symfony/uid/tree/v7.4.4"
            },
            "funding": [
                {
@@ -7839,20 +7839,20 @@
                    "type": "tidelift"
                }
            ],
-            "time": "2025-09-25T11:02:55+00:00"
+            "time": "2026-01-03T23:30:35+00:00"
        },
        {
            "name": "symfony/var-dumper",
-            "version": "v7.4.3",
+            "version": "v7.4.4",
            "source": {
                "type": "git",
                "url": "https://github.com/symfony/var-dumper.git",
-                "reference": "7e99bebcb3f90d8721890f2963463280848cba92"
+                "reference": "0e4769b46a0c3c62390d124635ce59f66874b282"
            },
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/symfony/var-dumper/zipball/7e99bebcb3f90d8721890f2963463280848cba92",
-                "reference": "7e99bebcb3f90d8721890f2963463280848cba92",
+                "url": "https://api.github.com/repos/symfony/var-dumper/zipball/0e4769b46a0c3c62390d124635ce59f66874b282",
+                "reference": "0e4769b46a0c3c62390d124635ce59f66874b282",
                "shasum": ""
            },
            "require": {
@@ -7906,7 +7906,7 @@
                "dump"
            ],
            "support": {
-                "source": "https://github.com/symfony/var-dumper/tree/v7.4.3"
+                "source": "https://github.com/symfony/var-dumper/tree/v7.4.4"
            },
            "funding": [
                {
@@ -7926,7 +7926,7 @@
                    "type": "tidelift"
                }
            ],
-            "time": "2025-12-18T07:04:31+00:00"
+            "time": "2026-01-01T22:13:48+00:00"
        },
        {
            "name": "thecodingmachine/safe",
@@ -9036,11 +9036,11 @@
        },
        {
            "name": "phpstan/phpstan",
-            "version": "2.1.36",
+            "version": "2.1.37",
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/phpstan/phpstan/zipball/2132e5e2361d11d40af4c17faa16f043269a4cf3",
-                "reference": "2132e5e2361d11d40af4c17faa16f043269a4cf3",
+                "url": "https://api.github.com/repos/phpstan/phpstan/zipball/28cd424c5ea984128c95cfa7ea658808e8954e49",
+                "reference": "28cd424c5ea984128c95cfa7ea658808e8954e49",
                "shasum": ""
            },
            "require": {
@@ -9085,7 +9085,7 @@
                    "type": "github"
                }
            ],
-            "time": "2026-01-21T13:58:26+00:00"
+            "time": "2026-01-24T08:21:55+00:00"
        },
        {
            "name": "phpunit/php-code-coverage",
@@ -9424,16 +9424,16 @@
        },
        {
            "name": "phpunit/phpunit",
-            "version": "11.5.48",
+            "version": "11.5.50",
            "source": {
                "type": "git",
                "url": "https://github.com/sebastianbergmann/phpunit.git",
-                "reference": "fe3665c15e37140f55aaf658c81a2eb9030b6d89"
+                "reference": "fdfc727f0fcacfeb8fcb30c7e5da173125b58be3"
            },
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/sebastianbergmann/phpunit/zipball/fe3665c15e37140f55aaf658c81a2eb9030b6d89",
-                "reference": "fe3665c15e37140f55aaf658c81a2eb9030b6d89",
+                "url": "https://api.github.com/repos/sebastianbergmann/phpunit/zipball/fdfc727f0fcacfeb8fcb30c7e5da173125b58be3",
+                "reference": "fdfc727f0fcacfeb8fcb30c7e5da173125b58be3",
                "shasum": ""
            },
            "require": {
@@ -9454,7 +9454,7 @@
                "phpunit/php-timer": "^7.0.1",
                "sebastian/cli-parser": "^3.0.2",
                "sebastian/code-unit": "^3.0.3",
-                "sebastian/comparator": "^6.3.2",
+                "sebastian/comparator": "^6.3.3",
                "sebastian/diff": "^6.0.2",
                "sebastian/environment": "^7.2.1",
                "sebastian/exporter": "^6.3.2",
@@ -9505,7 +9505,7 @@
            "support": {
                "issues": "https://github.com/sebastianbergmann/phpunit/issues",
                "security": "https://github.com/sebastianbergmann/phpunit/security/policy",
-                "source": "https://github.com/sebastianbergmann/phpunit/tree/11.5.48"
+                "source": "https://github.com/sebastianbergmann/phpunit/tree/11.5.50"
            },
            "funding": [
                {
@@ -9529,7 +9529,7 @@
                    "type": "tidelift"
                }
            ],
-            "time": "2026-01-16T16:26:27+00:00"
+            "time": "2026-01-27T05:59:18+00:00"
        },
        {
            "name": "sebastian/cli-parser",
@@ -9703,16 +9703,16 @@
        },
        {
            "name": "sebastian/comparator",
-            "version": "6.3.2",
+            "version": "6.3.3",
            "source": {
                "type": "git",
                "url": "https://github.com/sebastianbergmann/comparator.git",
-                "reference": "85c77556683e6eee4323e4c5468641ca0237e2e8"
+                "reference": "2c95e1e86cb8dd41beb8d502057d1081ccc8eca9"
            },
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/sebastianbergmann/comparator/zipball/85c77556683e6eee4323e4c5468641ca0237e2e8",
-                "reference": "85c77556683e6eee4323e4c5468641ca0237e2e8",
+                "url": "https://api.github.com/repos/sebastianbergmann/comparator/zipball/2c95e1e86cb8dd41beb8d502057d1081ccc8eca9",
+                "reference": "2c95e1e86cb8dd41beb8d502057d1081ccc8eca9",
                "shasum": ""
            },
            "require": {
@@ -9771,7 +9771,7 @@
            "support": {
                "issues": "https://github.com/sebastianbergmann/comparator/issues",
                "security": "https://github.com/sebastianbergmann/comparator/security/policy",
-                "source": "https://github.com/sebastianbergmann/comparator/tree/6.3.2"
+                "source": "https://github.com/sebastianbergmann/comparator/tree/6.3.3"
            },
            "funding": [
                {
@@ -9791,7 +9791,7 @@
                    "type": "tidelift"
                }
            ],
-            "time": "2025-08-10T08:07:46+00:00"
+            "time": "2026-01-24T09:26:40+00:00"
        },
        {
            "name": "sebastian/complexity",
@@ -10694,16 +10694,16 @@
        },
        {
            "name": "symfony/dom-crawler",
-            "version": "v7.4.1",
+            "version": "v7.4.4",
            "source": {
                "type": "git",
                "url": "https://github.com/symfony/dom-crawler.git",
-                "reference": "0c5e8f20c74c78172a8ee72b125909b505033597"
+                "reference": "71fd6a82fc357c8b5de22f78b228acfc43dee965"
            },
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/symfony/dom-crawler/zipball/0c5e8f20c74c78172a8ee72b125909b505033597",
-                "reference": "0c5e8f20c74c78172a8ee72b125909b505033597",
+                "url": "https://api.github.com/repos/symfony/dom-crawler/zipball/71fd6a82fc357c8b5de22f78b228acfc43dee965",
+                "reference": "71fd6a82fc357c8b5de22f78b228acfc43dee965",
                "shasum": ""
            },
            "require": {
@@ -10742,7 +10742,7 @@
            "description": "Eases DOM navigation for HTML and XML documents",
            "homepage": "https://symfony.com",
            "support": {
-                "source": "https://github.com/symfony/dom-crawler/tree/v7.4.1"
+                "source": "https://github.com/symfony/dom-crawler/tree/v7.4.4"
            },
            "funding": [
                {
@@ -10762,7 +10762,7 @@
                    "type": "tidelift"
                }
            ],
-            "time": "2025-12-06T15:47:47+00:00"
+            "time": "2026-01-05T08:47:25+00:00"
        },
        {
            "name": "theseer/tokenizer",
--- a/dev/licensing/php-library-licenses.txt
+++ b/dev/licensing/php-library-licenses.txt
@@ -237,21 +237,21 @@ Link: https://config.thephpleague.com
 league/flysystem
 License: MIT
 License File: vendor/league/flysystem/LICENSE
-Copyright: Copyright (c) 2013-2024 Frank de Jonge
+Copyright: Copyright (c) 2013-2026 Frank de Jonge
 Source: https://github.com/thephpleague/flysystem.git
 Link: https://github.com/thephpleague/flysystem.git
 -----------
 league/flysystem-aws-s3-v3
 License: MIT
 License File: vendor/league/flysystem-aws-s3-v3/LICENSE
-Copyright: Copyright (c) 2013-2024 Frank de Jonge
+Copyright: Copyright (c) 2013-2026 Frank de Jonge
 Source: https://github.com/thephpleague/flysystem-aws-s3-v3.git
 Link: https://github.com/thephpleague/flysystem-aws-s3-v3.git
 -----------
 league/flysystem-local
 License: MIT
 License File: vendor/league/flysystem-local/LICENSE
-Copyright: Copyright (c) 2013-2024 Frank de Jonge
+Copyright: Copyright (c) 2013-2026 Frank de Jonge
 Source: https://github.com/thephpleague/flysystem-local.git
 Link: https://github.com/thephpleague/flysystem-local.git
 -----------
@@ -323,7 +323,7 @@ License: MIT
 License File: vendor/nesbot/carbon/LICENSE
 Copyright: Copyright (C) Brian Nesbitt
 Source: https://github.com/CarbonPHP/carbon.git
-Link: https://carbon.nesbot.com
+Link: https://carbonphp.github.io/carbon/
 -----------
 nette/schema
 License: BSD-3-Clause GPL-2.0-only GPL-3.0-only
--- a/lang/ar/errors.php
+++ b/lang/ar/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'الشفرة المُقدمة لرمز API المستخدم المحدد غير صحيحة',
    'api_user_no_api_permission' => 'مالك رمز API المستخدم ليس لديه الصلاحية لإجراء مكالمات API',
    'api_user_token_expired' => 'انتهت صلاحية رمز الترخيص المستخدم',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'حدث خطأ عند إرسال بريد إلكتروني تجريبي:',
--- a/lang/bg/errors.php
+++ b/lang/bg/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'Секретния код, който беше предоставен за достъп до API-а е неправилен',
    'api_user_no_api_permission' => 'Собственика на АPI кода няма право да прави API заявки',
    'api_user_token_expired' => 'Кода за достъп, който беше използван, вече не е валиден',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Беше върната грешка, когато се изпрати тестовият емейл:',
--- a/lang/bn/errors.php
+++ b/lang/bn/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'The secret provided for the given used API token is incorrect',
    'api_user_no_api_permission' => 'The owner of the used API token does not have permission to make API calls',
    'api_user_token_expired' => 'The authorization token used has expired',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Error thrown when sending a test email:',
--- a/lang/bs/errors.php
+++ b/lang/bs/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'Tajni ključ naveden za dati korišteni API token nije tačan',
    'api_user_no_api_permission' => 'Vlasnik korištenog API tokena nema dozvolu za upućivanje API poziva',
    'api_user_token_expired' => 'Autorizacijski token je istekao',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Došlo je do greške prilikom slanja testnog e-maila:',
--- a/lang/ca/errors.php
+++ b/lang/ca/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'El secret proporcionat per al testimoni d’API utilitzat no és correcte.',
    'api_user_no_api_permission' => 'El propietari del testimoni API utilitzat no té permís per a fer crides a l’API.',
    'api_user_token_expired' => 'El testimoni d’autorització utilitzat ha caducat.',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'S’ha produït un error en enviar el correu electrònic de prova:',
--- a/lang/cs/errors.php
+++ b/lang/cs/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'Poskytnutý Token Secret neodpovídá použitému API tokenu',
    'api_user_no_api_permission' => 'Vlastník použitého API tokenu nemá oprávnění provádět API volání',
    'api_user_token_expired' => 'Platnost autorizačního tokenu vypršela',
+    'api_cookie_auth_only_get' => 'Při používání API s ověřováním pomocí souborů cookie jsou povoleny pouze požadavky GET',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Při posílání testovacího e-mailu nastala chyba:',
--- a/lang/cy/errors.php
+++ b/lang/cy/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'Mae\'r gyfrinach a ddarparwyd ar gyfer y tocyn API defnyddiedig a roddwyd yn anghywir',
    'api_user_no_api_permission' => 'Nid oes gan berchennog y tocyn API a ddefnyddiwyd ganiatâd i wneud galwadau API',
    'api_user_token_expired' => 'Mae\'r tocyn awdurdodi a ddefnyddiwyd wedi dod i ben',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Gwall a daflwyd wrth anfon e-bost prawf:',
--- a/lang/da/editor.php
+++ b/lang/da/editor.php
@@ -48,7 +48,7 @@ return [
    'superscript' => 'Hævet',
    'subscript' => 'Sænket',
    'text_color' => 'Tekstfarve',
-    'highlight_color' => 'Highlight color',
+    'highlight_color' => 'Fremhævelsesfarve',
    'custom_color' => 'Tilpasset farve',
    'remove_color' => 'Fjern farve',
    'background_color' => 'Baggrundsfarve',
--- a/lang/da/entities.php
+++ b/lang/da/entities.php
@@ -252,7 +252,7 @@ return [
    'pages_edit_switch_to_markdown_stable' => '(Stabilt indhold)',
    'pages_edit_switch_to_wysiwyg' => 'Skift til WYSIWYG redigering',
    'pages_edit_switch_to_new_wysiwyg' => 'Skift til ny WYSIWYG (Hvad man ser, er hvad man får)',
-    'pages_edit_switch_to_new_wysiwyg_desc' => '(In Beta Testing)',
+    'pages_edit_switch_to_new_wysiwyg_desc' => '(I Beta Test)',
    'pages_edit_set_changelog' => 'Sæt ændringsoversigt',
    'pages_edit_enter_changelog_desc' => 'Indtast en kort beskrivelse af ændringer du har lavet',
    'pages_edit_enter_changelog' => 'Indtast ændringsoversigt',
@@ -397,11 +397,11 @@ return [
    'comment' => 'Kommentar',
    'comments' => 'Kommentarer',
    'comment_add' => 'Tilføj kommentar',
-    'comment_none' => 'No comments to display',
+    'comment_none' => 'Ingen kommentarer at vise',
    'comment_placeholder' => 'Skriv en kommentar her',
-    'comment_thread_count' => ':count Comment Thread|:count Comment Threads',
+    'comment_thread_count' => ':count Kommentar Tråde:count Kommentar Tråde',
    'comment_archived_count' => ':count Arkiveret',
-    'comment_archived_threads' => 'Archived Threads',
+    'comment_archived_threads' => 'Arkiverede Tråde',
    'comment_save' => 'Gem kommentar',
    'comment_new' => 'Ny kommentar',
    'comment_created' => 'kommenteret :createDiff',
@@ -410,8 +410,8 @@ return [
    'comment_deleted_success' => 'Kommentar slettet',
    'comment_created_success' => 'Kommentaren er tilføjet',
    'comment_updated_success' => 'Kommentaren er opdateret',
-    'comment_archive_success' => 'Comment archived',
-    'comment_unarchive_success' => 'Comment un-archived',
+    'comment_archive_success' => 'Kommentar arkiveret',
+    'comment_unarchive_success' => 'Kommentaren er ikke længere arkiveret',
    'comment_view' => 'Se kommentar',
    'comment_jump_to_thread' => 'Hop til tråd',
    'comment_delete_confirm' => 'Er du sikker på, at du vil slette denne kommentar?',
--- a/lang/da/errors.php
+++ b/lang/da/errors.php
@@ -109,7 +109,7 @@ return [
    'import_zip_cant_read' => 'Kunne ikke læse ZIP-filen.',
    'import_zip_cant_decode_data' => 'Kunne ikke finde og afkode ZIP data.json-indhold.',
    'import_zip_no_data' => 'ZIP-filens data har ikke noget forventet bog-, kapitel- eller sideindhold.',
-    'import_zip_data_too_large' => 'ZIP data.json content exceeds the configured application maximum upload size.',
+    'import_zip_data_too_large' => 'Indholdet af ZIP data.json overstiger den konfigurerede maksimale uploadstørrelse for applikationen.',
    'import_validation_failed' => 'Import ZIP kunne ikke valideres med fejl:',
    'import_zip_failed_notification' => 'Kunne ikke importere ZIP-fil.',
    'import_perms_books' => 'Du mangler de nødvendige tilladelser til at oprette bøger.',
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'Hemmeligheden leveret til det givne anvendte API-token er forkert',
    'api_user_no_api_permission' => 'Ejeren af den brugte API token har ikke adgang til at foretage API-kald',
    'api_user_token_expired' => 'Den brugte godkendelsestoken er udløbet',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Følgende fejl opstod under afsendelse af testemail:',
--- a/lang/da/notifications.php
+++ b/lang/da/notifications.php
@@ -11,8 +11,8 @@ return [
    'updated_page_subject' => 'Opdateret side: :pageName',
    'updated_page_intro' => 'En side er blevet opdateret i :appName:',
    'updated_page_debounce' => 'For at forhindre en masse af notifikationer, i et stykke tid vil du ikke blive sendt notifikationer for yderligere redigeringer til denne side af den samme editor.',
-    'comment_mention_subject' => 'You have been mentioned in a comment on page: :pageName',
-    'comment_mention_intro' => 'You were mentioned in a comment on :appName:',
+    'comment_mention_subject' => 'Du er blevet nævnt i en kommentar på siden: :pageName',
+    'comment_mention_intro' => 'Du blev nævnt i en kommentar på :appName:',

    'detail_page_name' => 'Sidens navn:',
    'detail_page_path' => 'Sidesti:',
--- a/lang/da/preferences.php
+++ b/lang/da/preferences.php
@@ -23,7 +23,7 @@ return [
    'notifications_desc' => 'Administrer de e-mail-notifikationer, du modtager, når visse aktiviteter udføres i systemet.',
    'notifications_opt_own_page_changes' => 'Adviser ved ændringer af sider, jeg ejer',
    'notifications_opt_own_page_comments' => 'Adviser ved kommentarer på sider, jeg ejer',
-    'notifications_opt_comment_mentions' => 'Notify when I\'m mentioned in a comment',
+    'notifications_opt_comment_mentions' => 'Giv besked, når jeg er nævnt i en kommentar',
    'notifications_opt_comment_replies' => 'Adviser ved svar på mine kommentarer',
    'notifications_save' => 'Gem indstillinger',
    'notifications_update_success' => 'Indstillinger for notifikationer er blevet opdateret!',
--- a/lang/da/settings.php
+++ b/lang/da/settings.php
@@ -75,8 +75,8 @@ return [
    'reg_confirm_restrict_domain_placeholder' => 'Ingen restriktion opsat',

    // Sorting Settings
-    'sorting' => 'Lists & Sorting',
-    'sorting_book_default' => 'Default Book Sort Rule',
+    'sorting' => 'Lister & Sortering',
+    'sorting_book_default' => 'Standardregel for sortering af bog',
    'sorting_book_default_desc' => 'Vælg den standardsorteringsregel, der skal gælde for nye bøger. Dette påvirker ikke eksisterende bøger og kan tilsidesættes for hver enkelt bog.',
    'sorting_rules' => 'Regler for sortering',
    'sorting_rules_desc' => 'Det er foruddefinerede sorteringsoperationer, som kan anvendes på indhold i systemet.',
@@ -103,8 +103,8 @@ return [
    'sort_rule_op_updated_date' => 'Opdateret dato',
    'sort_rule_op_chapters_first' => 'Kapitler først',
    'sort_rule_op_chapters_last' => 'De sidste kapitler',
-    'sorting_page_limits' => 'Per-Page Display Limits',
-    'sorting_page_limits_desc' => 'Set how many items to show per-page in various lists within the system. Typically a lower amount will be more performant, while a higher amount avoids the need to click through multiple pages. Using an even multiple of 3 (18, 24, 30, etc...) is recommended.',
+    'sorting_page_limits' => 'Visningsgrænser pr. side',
+    'sorting_page_limits_desc' => 'Angiv, hvor mange elementer der skal vises pr. side i forskellige lister i systemet. Typisk vil et lavere beløb være mere effektivt, mens et højere beløb undgår behovet for at klikke sig igennem flere sider. Det anbefales at bruge et lige multiplum af 3 (18, 24, 30 osv.).',

    // Maintenance settings
    'maint' => 'Vedligeholdelse',
@@ -197,13 +197,13 @@ return [
    'role_import_content' => 'Importer indhold',
    'role_editor_change' => 'Skift side editor',
    'role_notifications' => 'Modtag og administrer notifikationer',
-    'role_permission_note_users_and_roles' => 'These permissions will technically also provide visibility & searching of users & roles in the system.',
+    'role_permission_note_users_and_roles' => 'Disse tilladelser vil teknisk set også give synlighed og søgning efter brugere og roller i systemet.',
    'role_asset' => 'Tilladelser for medier og "assets"',
    'roles_system_warning' => 'Vær opmærksom på, at adgang til alle af de ovennævnte tre tilladelser, kan give en bruger mulighed for at ændre deres egne brugerrettigheder eller brugerrettigheder for andre i systemet. Tildel kun roller med disse tilladelser til betroede brugere.',
    'role_asset_desc' => 'Disse tilladelser kontrollerer standardadgang til medier og "assets" i systemet. Tilladelser til bøger, kapitler og sider tilsidesætter disse tilladelser.',
    'role_asset_admins' => 'Administratorer får automatisk adgang til alt indhold, men disse indstillinger kan vise eller skjule UI-indstillinger.',
    'role_asset_image_view_note' => 'Dette vedrører synlighed i billedhåndteringen. Den faktiske adgang til uploadede billedfiler vil afhænge af systemets billedlagringsindstilling.',
-    'role_asset_users_note' => 'These permissions will technically also provide visibility & searching of users in the system.',
+    'role_asset_users_note' => 'Disse tilladelser vil teknisk set også give synlighed og søgning efter brugere i systemet.',
    'role_all' => 'Alle',
    'role_own' => 'Eget',
    'role_controlled_by_asset' => 'Styres af det medie/"asset", de uploades til',
--- a/lang/da/validation.php
+++ b/lang/da/validation.php
@@ -106,7 +106,7 @@ return [
    'uploaded'             => 'Filen kunne ikke oploades. Serveren accepterer muligvis ikke filer af denne størrelse.',

    'zip_file' => 'Attributten skal henvise til en fil i ZIP.',
-    'zip_file_size' => 'The file :attribute must not exceed :size MB.',
+    'zip_file_size' => 'Filen :attribute må ikke overstige: størrelse MB.',
    'zip_file_mime' => 'Attributten skal henvise til en fil af typen: validTypes, fundet:foundType.',
    'zip_model_expected' => 'Data objekt forventet men ":type" fundet.',
    'zip_unique' => 'Attributten skal være unik for objekttypen i ZIP.',
--- a/lang/de/errors.php
+++ b/lang/de/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'Das Kennwort für das angegebene API-Token ist falsch',
    'api_user_no_api_permission' => 'Der Besitzer des verwendeten API-Tokens hat keine Berechtigung für API-Aufrufe',
    'api_user_token_expired' => 'Das verwendete Autorisierungstoken ist abgelaufen',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Fehler beim Versenden einer Test E-Mail:',
--- a/lang/de_informal/errors.php
+++ b/lang/de_informal/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'Das für den API-Token angegebene geheime Token ist falsch',
    'api_user_no_api_permission' => 'Der Besitzer des verwendeten API-Token hat keine Berechtigung für API-Aufrufe',
    'api_user_token_expired' => 'Das verwendete Autorisierungs-Token ist abgelaufen',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Fehler beim Senden einer Test E-Mail:',
--- a/lang/el/errors.php
+++ b/lang/el/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'Το μυστικό που παρέχεται για το δεδομένο χρησιμοποιημένο διακριτικό API είναι εσφαλμένο',
    'api_user_no_api_permission' => 'Ο ιδιοκτήτης του χρησιμοποιημένου διακριτικού API δεν έχει άδεια για να κάνει κλήσεις API',
    'api_user_token_expired' => 'Το διακριτικό εξουσιοδότησης που χρησιμοποιείται έχει λήξει',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Σφάλμα κατά την αποστολή δοκιμαστικού email:',
--- a/lang/en/errors.php
+++ b/lang/en/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'The secret provided for the given used API token is incorrect',
    'api_user_no_api_permission' => 'The owner of the used API token does not have permission to make API calls',
    'api_user_token_expired' => 'The authorization token used has expired',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Error thrown when sending a test email:',
--- a/lang/es/errors.php
+++ b/lang/es/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'El secreto proporcionado para el token API usado es incorrecto',
    'api_user_no_api_permission' => 'El propietario del token API usado no tiene permiso para hacer llamadas API',
    'api_user_token_expired' => 'El token de autorización usado ha caducado',
+    'api_cookie_auth_only_get' => 'Sólo se permiten peticiones GET cuando se utiliza el API con autenticación basada en cookies',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Error al enviar un email de prueba:',
--- a/lang/es_AR/errors.php
+++ b/lang/es_AR/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'El secreto proporcionado para el token API usado es incorrecto',
    'api_user_no_api_permission' => 'El propietario del token API usado no tiene permiso para hacer llamadas API',
    'api_user_token_expired' => 'El token de autorización usado ha caducado',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Error al enviar un email de prueba:',
--- a/lang/et/errors.php
+++ b/lang/et/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'API tunnusele lisatud salajane võti ei ole korrektne',
    'api_user_no_api_permission' => 'Selle API tunnuse omanikul ei ole õigust API päringuid teha',
    'api_user_token_expired' => 'Volitustunnus on aegunud',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Test e-kirja saatmisel tekkis viga:',
--- a/lang/eu/errors.php
+++ b/lang/eu/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'The secret provided for the given used API token is incorrect',
    'api_user_no_api_permission' => 'The owner of the used API token does not have permission to make API calls',
    'api_user_token_expired' => 'The authorization token used has expired',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Error thrown when sending a test email:',
--- a/lang/fa/errors.php
+++ b/lang/fa/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'راز ارائه شده برای کد API استفاده شده نادرست است',
    'api_user_no_api_permission' => 'مالک نشانه API استفاده شده اجازه برقراری تماس های API را ندارد',
    'api_user_token_expired' => 'رمز مجوز استفاده شده منقضی شده است',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'خطا در هنگام ارسال ایمیل آزمایشی:',
--- a/lang/fi/errors.php
+++ b/lang/fi/errors.php
@@ -126,6 +126,7 @@ Sovellus ei tunnista ulkoisen todennuspalvelun pyyntöä. Ongelman voi aiheuttaa
    'api_incorrect_token_secret' => 'API-tunnisteelle annettu salainen avain on virheellinen',
    'api_user_no_api_permission' => 'Käytetyn API-tunnisteen omistajalla ei ole oikeutta tehdä API-kutsuja',
    'api_user_token_expired' => 'Käytetty valtuutuskoodi on vanhentunut',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Virhe testisähköpostia lähetettäessä:',
--- a/lang/fr/errors.php
+++ b/lang/fr/errors.php
@@ -13,7 +13,7 @@ return [
    'auth_pre_register_theme_prevention' => 'Le compte utilisateur n\'a pas pu être enregistré avec les informations fournies',
    'email_already_confirmed' => 'Cet e-mail a déjà été validé, vous pouvez vous connecter.',
    'email_confirmation_invalid' => 'Cette confirmation est invalide. Veuillez essayer de vous inscrire à nouveau.',
-    'email_confirmation_expired' => 'Le jeton de confirmation est périmé. Un nouvel e-mail vous a été envoyé.',
+    'email_confirmation_expired' => 'Le jeton de confirmation a expiré. Un nouvel e-mail vous a été envoyé.',
    'email_confirmation_awaiting' => 'L\'adresse e-mail du compte utilisé doit être confirmée',
    'ldap_fail_anonymous' => 'L\'accès LDAP anonyme n\'a pas abouti',
    'ldap_fail_authed' => 'L\'accès LDAP n\'a pas abouti avec cet utilisateur et ce mot de passe',
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'Le secret fourni pour le jeton d\'API utilisé est incorrect',
    'api_user_no_api_permission' => 'Le propriétaire du jeton API utilisé n\'a pas la permission de passer des requêtes API',
    'api_user_token_expired' => 'Le jeton d\'autorisation utilisé a expiré',
+    'api_cookie_auth_only_get' => 'Seules les requêtes GET sont autorisées lors de l’utilisation de l’API avec une authentification basée sur les cookies',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Erreur émise lors de l\'envoi d\'un e-mail de test :',
--- a/lang/he/errors.php
+++ b/lang/he/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'The secret provided for the given used API token is incorrect',
    'api_user_no_api_permission' => 'The owner of the used API token does not have permission to make API calls',
    'api_user_token_expired' => 'The authorization token used has expired',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Error thrown when sending a test email:',
--- a/lang/hr/errors.php
+++ b/lang/hr/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'Netočan API token',
    'api_user_no_api_permission' => 'Vlasnik API tokena nema potrebna dopuštenja',
    'api_user_token_expired' => 'Autorizacija je istekla',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Pogreška prilikom slanja testnog email:',
--- a/lang/hu/errors.php
+++ b/lang/hu/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'Az API tokenhez használt secret helytelen',
    'api_user_no_api_permission' => 'A használt API vezérjel tulajdonosának nincs jogosultsága API hívások végrehajtásához',
    'api_user_token_expired' => 'A használt hitelesítési vezérjel lejárt',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Hiba történt egy teszt email küldésekor:',
--- a/lang/id/errors.php
+++ b/lang/id/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'Rahasia yang diberikan untuk token API bekas yang diberikan salah',
    'api_user_no_api_permission' => 'Pemilik token API yang digunakan tidak memiliki izin untuk melakukan panggilan API',
    'api_user_token_expired' => 'Token otorisasi yang digunakan telah kedaluwarsa',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Kesalahan dilempar saat mengirim email uji:',
--- a/lang/is/errors.php
+++ b/lang/is/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'Leyndarmálið sem gefið var upp fyrir API tókann er rangt',
    'api_user_no_api_permission' => 'Eigandi API tókans hefur ekki heimild til að gera API köll',
    'api_user_token_expired' => 'Auðkenningar tókin er útrunninn',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Villa kom upp viðað reyna senda prufu tölvupóst:',
--- a/lang/it/errors.php
+++ b/lang/it/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'Il token segreto fornito per il token API utilizzato non è corretto',
    'api_user_no_api_permission' => 'Il proprietario del token API utilizzato non ha il permesso di effettuare chiamate API',
    'api_user_token_expired' => 'Il token di autorizzazione utilizzato è scaduto',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Si è verificato un errore durante l\'invio di una e-mail di prova:',
--- a/lang/ja/errors.php
+++ b/lang/ja/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => '利用されたAPIトークンに対して提供されたシークレットが正しくありません',
    'api_user_no_api_permission' => '使用されているAPIトークンの所有者には、API呼び出しを行う権限がありません',
    'api_user_token_expired' => '認証トークンが期限切れです。',
+    'api_cookie_auth_only_get' => 'Cookie ベースの認証で API を使用する場合、GET リクエストのみが許可されます',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'テストメール送信時にエラーが発生しました:',
--- a/lang/ka/errors.php
+++ b/lang/ka/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'The secret provided for the given used API token is incorrect',
    'api_user_no_api_permission' => 'The owner of the used API token does not have permission to make API calls',
    'api_user_token_expired' => 'The authorization token used has expired',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Error thrown when sending a test email:',
--- a/lang/ko/errors.php
+++ b/lang/ko/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'API 토큰이 제공한 암호에 문제가 있습니다.',
    'api_user_no_api_permission' => 'API 토큰의 소유자가 API를 호출할 권한이 없습니다.',
    'api_user_token_expired' => '인증 토큰이 만료되었습니다.',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => '메일을 발송하는 도중 문제가 생겼습니다:',
--- a/lang/ku/errors.php
+++ b/lang/ku/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'The secret provided for the given used API token is incorrect',
    'api_user_no_api_permission' => 'The owner of the used API token does not have permission to make API calls',
    'api_user_token_expired' => 'The authorization token used has expired',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Error thrown when sending a test email:',
--- a/lang/lt/errors.php
+++ b/lang/lt/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'Pateiktas panaudoto API žetono slėpinys yra neteisingas',
    'api_user_no_api_permission' => 'API prieigos rakto savininkas neturi leidimo daryti API skambučius',
    'api_user_token_expired' => 'Prieigos rakto naudojimas baigė galioti',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Siunčiant bandymo email: įvyko klaida',
--- a/lang/lv/errors.php
+++ b/lang/lv/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'Norādītā slepenā atslēga izmantotajam API žetonam nav pareiza',
    'api_user_no_api_permission' => 'Izmantotā API žetona īpašniekam nav tiesības veikt API izsaukumus',
    'api_user_token_expired' => 'Autorizācijas žetona derīguma termiņš ir izbeidzies',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Radusies kļūda sūtot testa epastu:',
--- a/lang/nb/errors.php
+++ b/lang/nb/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'Hemmeligheten som er gitt for det gitte brukte API-tokenet er feil',
    'api_user_no_api_permission' => 'Eieren av det brukte API-tokenet har ikke tillatelse til å ringe API-samtaler',
    'api_user_token_expired' => 'Autorisasjonstokenet som er brukt, har utløpt',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Feil kastet når du sendte en test-e-post:',
--- a/lang/ne/errors.php
+++ b/lang/ne/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'दिइएको API टोकनको लागि प्रदान गरिएको गोप्य सही छैन।',
    'api_user_no_api_permission' => 'API टोकनको मालिकसँग API कल गर्ने अनुमति छैन।',
    'api_user_token_expired' => 'प्रमाणीकरण टोकन समाप्त भइसकेको छ।',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'टेस्ट इमेल पठाउँदा त्रुटि:',
--- a/lang/nl/errors.php
+++ b/lang/nl/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'Het opgegeven geheim voor de API-token is onjuist',
    'api_user_no_api_permission' => 'De eigenaar van de gebruikte API-token heeft geen machtiging om API calls te maken',
    'api_user_token_expired' => 'De gebruikte autorisatie token is verlopen',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Fout opgetreden bij het verzenden van een test email:',
--- a/lang/nn/errors.php
+++ b/lang/nn/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'Hemmeligheten som er gitt for det gitte brukte API-tokenet er feil',
    'api_user_no_api_permission' => 'Eieren av det brukte API-tokenet har ikke tillatelse til å ringe API-samtaler',
    'api_user_token_expired' => 'Autorisasjonstokenet som er brukt, har utløpt',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Feil kastet når du sendte en test-e-post:',
--- a/lang/pl/activities.php
+++ b/lang/pl/activities.php
@@ -6,52 +6,52 @@
 return [

    // Pages
-    'page_create'                 => 'utworzył stronę',
+    'page_create'                 => 'utworzono stronę',
    'page_create_notification'    => 'Strona została utworzona',
-    'page_update'                 => 'zaktualizował stronę',
+    'page_update'                 => 'zaktualizowano stronę',
    'page_update_notification'    => 'Strona zaktualizowana pomyślnie',
-    'page_delete'                 => 'usunął stronę',
+    'page_delete'                 => 'usunięto stronę',
    'page_delete_notification'    => 'Strona została usunięta',
-    'page_restore'                => 'przywrócił stronę',
+    'page_restore'                => 'przywrócono stronę',
    'page_restore_notification'   => 'Strona przywrócona pomyślnie',
-    'page_move'                   => 'przeniósł stronę',
+    'page_move'                   => 'przeniesiono stronę',
    'page_move_notification'      => 'Strona przeniesiona pomyślnie',

    // Chapters
-    'chapter_create'              => 'utworzył rozdział',
+    'chapter_create'              => 'utworzono rozdział',
    'chapter_create_notification' => 'Rozdział utworzony pomyślnie',
-    'chapter_update'              => 'zaktualizował rozdział',
+    'chapter_update'              => 'zaktualizowano rozdział',
    'chapter_update_notification' => 'Rozdział zaktualizowany pomyślnie',
-    'chapter_delete'              => 'usunął rozdział',
+    'chapter_delete'              => 'usunięto rozdział',
    'chapter_delete_notification' => 'Rozdział usunięty pomyślnie',
-    'chapter_move'                => 'przeniósł rozdział',
+    'chapter_move'                => 'przeniesiono rozdział',
    'chapter_move_notification' => 'Rozdział przeniesiony pomyślnie',

    // Books
-    'book_create'                 => 'utworzył książkę',
+    'book_create'                 => 'utworzono książkę',
    'book_create_notification'    => 'Książka utworzona pomyślnie',
-    'book_create_from_chapter'              => 'skonwertował rozdział na książkę',
+    'book_create_from_chapter'              => 'przekonwertowano rozdział na książkę',
    'book_create_from_chapter_notification' => 'Rozdział został pomyślnie skonwertowany do książki',
-    'book_update'                 => 'zaktualizował książkę',
+    'book_update'                 => 'zaktualizowano książkę',
    'book_update_notification'    => 'Książka zaktualizowana pomyślnie',
-    'book_delete'                 => 'usunął książkę',
+    'book_delete'                 => 'usunięto książkę',
    'book_delete_notification'    => 'Książka usunięta pomyślnie',
-    'book_sort'                   => 'posortował książkę',
+    'book_sort'                   => 'posortowano książkę',
    'book_sort_notification'      => 'Książka posortowana pomyślnie',

    // Bookshelves
-    'bookshelf_create'            => 'utworzył półkę',
+    'bookshelf_create'            => 'utworzyono półkę',
    'bookshelf_create_notification'    => 'Półka utworzona pomyślnie',
-    'bookshelf_create_from_book'    => 'skonwertował książkę na półkę',
+    'bookshelf_create_from_book'    => 'przekonwertowano książkę na półkę',
    'bookshelf_create_from_book_notification'    => 'Książka została pomyślnie skonwertowana na półkę',
-    'bookshelf_update'                 => 'zaktualizował półkę',
+    'bookshelf_update'                 => 'zaktualizowano półkę',
    'bookshelf_update_notification'    => 'Półka zaktualizowana pomyślnie',
-    'bookshelf_delete'                 => 'usunął półkę',
+    'bookshelf_delete'                 => 'usunięto półkę',
    'bookshelf_delete_notification'    => 'Półka usunięta pomyślnie',

    // Revisions
-    'revision_restore' => 'przywrócił wersję',
-    'revision_delete' => 'usunął wersję',
+    'revision_restore' => 'przywrócono wersję',
+    'revision_delete' => 'usunięto wersję',
    'revision_delete_notification' => 'Wersja usunięta pomyślnie',

    // Favourites
@@ -72,54 +72,54 @@ return [
    'mfa_remove_method_notification' => 'Metoda wieloskładnikowa pomyślnie usunięta',

    // Settings
-    'settings_update' => 'zaktualizował ustawienia',
+    'settings_update' => 'zaktualizowano ustawienia',
    'settings_update_notification' => 'Ustawienia zaktualizowane pomyślnie',
-    'maintenance_action_run' => 'uruchomił akcję konserwacji',
+    'maintenance_action_run' => 'uruchomiono akcję konserwacji',

    // Webhooks
-    'webhook_create' => 'utworzył webhook',
+    'webhook_create' => 'utworzono webhook',
    'webhook_create_notification' => 'Webhook utworzony pomyślnie',
-    'webhook_update' => 'zaktualizował webhook',
+    'webhook_update' => 'zaktualizowano webhook',
    'webhook_update_notification' => 'Webhook zaktualizowany pomyślnie',
-    'webhook_delete' => 'usunął webhook',
+    'webhook_delete' => 'usunięto webhook',
    'webhook_delete_notification' => 'Webhook usunięty pomyślnie',

    // Imports
    'import_create' => 'utworzono import',
-    'import_create_notification' => 'Import successfully uploaded',
-    'import_run' => 'updated import',
-    'import_run_notification' => 'Content successfully imported',
-    'import_delete' => 'deleted import',
-    'import_delete_notification' => 'Import successfully deleted',
+    'import_create_notification' => 'Import zakończony sukcesem',
+    'import_run' => 'zaktualizowano import',
+    'import_run_notification' => 'Zawartość pomyślnie zaimportowana',
+    'import_delete' => 'usunięto import',
+    'import_delete_notification' => 'Import usunięty',

    // Users
-    'user_create' => 'utworzył użytkownika',
+    'user_create' => 'utworzono użytkownika',
    'user_create_notification' => 'Użytkownik utworzony pomyślnie',
-    'user_update' => 'zaktualizował użytkownika',
+    'user_update' => 'zaktualizowano użytkownika',
    'user_update_notification' => 'Użytkownik zaktualizowany pomyślnie',
-    'user_delete' => 'usunął użytkownika',
+    'user_delete' => 'usunięto użytkownika',
    'user_delete_notification' => 'Użytkownik pomyślnie usunięty',

    // API Tokens
-    'api_token_create' => 'utworzył token API',
+    'api_token_create' => 'utworzono token API',
    'api_token_create_notification' => 'Token API został poprawnie utworzony',
-    'api_token_update' => 'zaktualizował token API',
+    'api_token_update' => 'zaktualizowano token API',
    'api_token_update_notification' => 'Token API został pomyślnie zaktualizowany',
-    'api_token_delete' => 'usunął token API',
+    'api_token_delete' => 'usunięto token API',
    'api_token_delete_notification' => 'Token API został pomyślnie usunięty',

    // Roles
-    'role_create' => 'utworzył rolę',
+    'role_create' => 'utworzono rolę',
    'role_create_notification' => 'Rola utworzona pomyślnie',
-    'role_update' => 'zaktualizował rolę',
+    'role_update' => 'zaktualizowano rolę',
    'role_update_notification' => 'Rola zaktualizowana pomyślnie',
-    'role_delete' => 'usunął rolę',
+    'role_delete' => 'usunięto rolę',
    'role_delete_notification' => 'Rola usunięta pomyślnie',

    // Recycle Bin
-    'recycle_bin_empty' => 'opróżnił kosz',
-    'recycle_bin_restore' => 'przywrócił z kosza',
-    'recycle_bin_destroy' => 'usunął z kosza',
+    'recycle_bin_empty' => 'opróżniono kosz',
+    'recycle_bin_restore' => 'przywrócono z kosza',
+    'recycle_bin_destroy' => 'usunięto z kosza',

    // Comments
    'commented_on'                => 'skomentował',
@@ -128,12 +128,12 @@ return [
    'comment_delete'              => 'usunął komentarz',

    // Sort Rules
-    'sort_rule_create' => 'created sort rule',
-    'sort_rule_create_notification' => 'Sort rule successfully created',
-    'sort_rule_update' => 'updated sort rule',
-    'sort_rule_update_notification' => 'Sort rule successfully updated',
-    'sort_rule_delete' => 'deleted sort rule',
-    'sort_rule_delete_notification' => 'Sort rule successfully deleted',
+    'sort_rule_create' => 'utworzono regułę sortowania',
+    'sort_rule_create_notification' => 'Reguła sortowania została pomyślnie stworzona',
+    'sort_rule_update' => 'zaktualizowano regułę sortowania',
+    'sort_rule_update_notification' => 'Reguła sortowania została pomyślnie zaktualizowana',
+    'sort_rule_delete' => 'usunięto regułę sortowania',
+    'sort_rule_delete_notification' => 'Reguła sortowania została pomyślnie usunięta',

    // Other
    'permissions_update'          => 'zaktualizował uprawnienia',
--- a/lang/pl/common.php
+++ b/lang/pl/common.php
@@ -30,8 +30,8 @@ return [
    'create' => 'Utwórz',
    'update' => 'Zaktualizuj',
    'edit' => 'Edytuj',
-    'archive' => 'Archive',
-    'unarchive' => 'Un-Archive',
+    'archive' => 'Archiwizuj',
+    'unarchive' => 'Wypakuj z archiwum',
    'sort' => 'Sortuj',
    'move' => 'Przenieś',
    'copy' => 'Skopiuj',
--- a/lang/pl/editor.php
+++ b/lang/pl/editor.php
@@ -13,7 +13,7 @@ return [
    'cancel' => 'Anuluj',
    'save' => 'Zapisz',
    'close' => 'Zamknij',
-    'apply' => 'Apply',
+    'apply' => 'Zatwierdź',
    'undo' => 'Cofnij',
    'redo' => 'Ponów',
    'left' => 'Lewa strona',
@@ -48,7 +48,7 @@ return [
    'superscript' => 'Indeks górny',
    'subscript' => 'Indeks dolny',
    'text_color' => 'Kolor tekstu',
-    'highlight_color' => 'Highlight color',
+    'highlight_color' => 'Kolor podkreślenia',
    'custom_color' => 'Kolor niestandardowy',
    'remove_color' => 'Usuń kolor',
    'background_color' => 'Kolor tła',
@@ -149,7 +149,7 @@ return [
    'url' => 'Adres URL',
    'text_to_display' => 'Tekst do wyświetlenia',
    'title' => 'Tytuł',
-    'browse_links' => 'Browse links',
+    'browse_links' => 'Przeglądaj linki',
    'open_link' => 'Otwórz link',
    'open_link_in' => 'Otwórz link w...',
    'open_link_current' => 'Bieżące okno',
@@ -166,8 +166,8 @@ return [
    'about' => 'O edytorze',
    'about_title' => 'O edytorze WYSIWYG',
    'editor_license' => 'Licencja edytora i prawa autorskie',
-    'editor_lexical_license' => 'This editor is built as a fork of :lexicalLink which is distributed under the MIT license.',
-    'editor_lexical_license_link' => 'Full license details can be found here.',
+    'editor_lexical_license' => 'Ten edytor został zbudowany na podstawie :lexicalLink, który jest dystrybuowany na licencji MIT.',
+    'editor_lexical_license_link' => 'Pełne szczegóły licencji znajdziesz tutaj.',
    'editor_tiny_license' => 'Ten edytor jest zbudowany przy użyciu :tinyLink, który jest udostępniany na licencji MIT.',
    'editor_tiny_license_link' => 'Szczegóły dotyczące praw autorskich i licencji TinyMCE można znaleźć tutaj.',
    'save_continue' => 'Zapisz stronę i kontynuuj',
--- a/lang/pl/entities.php
+++ b/lang/pl/entities.php
@@ -39,30 +39,30 @@ return [
    'export_pdf' => 'Plik PDF',
    'export_text' => 'Plik tekstowy',
    'export_md' => 'Pliki Markdown',
-    'export_zip' => 'Portable ZIP',
+    'export_zip' => 'Archiwum ZIP',
    'default_template' => 'Domyślny szablon strony',
    'default_template_explain' => 'Przypisz szablon strony, który będzie używany jako domyślna zawartość dla wszystkich stron utworzonych w tym elemencie. Pamiętaj, że będzie to używane tylko wtedy, gdy twórca strony ma dostęp do wybranej strony szablonu.',
    'default_template_select' => 'Wybierz stronę szablonu',
-    'import' => 'Import',
-    'import_validate' => 'Validate Import',
-    'import_desc' => 'Import books, chapters & pages using a portable zip export from the same, or a different, instance. Select a ZIP file to proceed. After the file has been uploaded and validated you\'ll be able to configure & confirm the import in the next view.',
-    'import_zip_select' => 'Select ZIP file to upload',
-    'import_zip_validation_errors' => 'Errors were detected while validating the provided ZIP file:',
-    'import_pending' => 'Pending Imports',
-    'import_pending_none' => 'No imports have been started.',
-    'import_continue' => 'Continue Import',
-    'import_continue_desc' => 'Review the content due to be imported from the uploaded ZIP file. When ready, run the import to add its contents to this system. The uploaded ZIP import file will be automatically removed on successful import.',
-    'import_details' => 'Import Details',
-    'import_run' => 'Run Import',
-    'import_size' => ':size Import ZIP Size',
-    'import_uploaded_at' => 'Uploaded :relativeTime',
-    'import_uploaded_by' => 'Uploaded by',
-    'import_location' => 'Import Location',
-    'import_location_desc' => 'Select a target location for your imported content. You\'ll need the relevant permissions to create within the location you choose.',
-    'import_delete_confirm' => 'Are you sure you want to delete this import?',
-    'import_delete_desc' => 'This will delete the uploaded import ZIP file, and cannot be undone.',
-    'import_errors' => 'Import Errors',
-    'import_errors_desc' => 'The follow errors occurred during the import attempt:',
+    'import' => 'Importuj',
+    'import_validate' => 'Zweryfikuj import',
+    'import_desc' => 'Importuj książki, rozdziały i strony za pomocą eksportu archiwum ZIP z tej samej lub innej instancji. Wybierz plik ZIP, aby kontynuować. Po przesłaniu i potwierdzeniu pliku będziesz mógł skonfigurować i potwierdzić import w następnym kroku.',
+    'import_zip_select' => 'Wybierz archiwum ZIP do wgrania',
+    'import_zip_validation_errors' => 'Podczas sprawdzania poprawności dostarczonego pliku ZIP wykryto błędy:',
+    'import_pending' => 'Oczekujące importy',
+    'import_pending_none' => 'Żaden import nie został uruchomiony.',
+    'import_continue' => 'Kontynuuj import',
+    'import_continue_desc' => 'Przejrzyj zawartość, która ma być zaimportowana z przesłanego pliku ZIP. Kiedy będziesz gotowy, uruchom import, aby dodać jego zawartość do systemu. Przesłane archiwum ZIP zostanie automatycznie usunięte po udanym importowaniu.',
+    'import_details' => 'Szczegóły importu',
+    'import_run' => 'Wykonaj import',
+    'import_size' => ':size wielkość importu ZIP',
+    'import_uploaded_at' => 'Przesłano :relativeTime',
+    'import_uploaded_by' => 'Przesłane przez',
+    'import_location' => 'Lokalizacja importu',
+    'import_location_desc' => 'Wybierz docelową lokalizację dla importowanej zawartości. Będziesz potrzebować odpowiednich uprawnień do tworzenia w wybranej lokalizacji.',
+    'import_delete_confirm' => 'Czy na pewno chcesz usunąć ten import?',
+    'import_delete_desc' => 'Spowoduje to usunięcie zaimportowanego archiwum ZIP. Tej operacji nie da się cofnąć.',
+    'import_errors' => 'Błędy importu',
+    'import_errors_desc' => 'Podczas próby importu wystąpiły następujące błędy:',
    'breadcrumb_siblings_for_page' => 'Navigate siblings for page',
    'breadcrumb_siblings_for_chapter' => 'Navigate siblings for chapter',
    'breadcrumb_siblings_for_book' => 'Navigate siblings for book',
@@ -171,8 +171,8 @@ return [
    'books_navigation' => 'Nawigacja po książce',
    'books_sort' => 'Sortuj zawartość książki',
    'books_sort_desc' => 'Move chapters and pages within a book to reorganise its contents. Other books can be added which allows easy moving of chapters and pages between books. Optionally an auto sort rule can be set to automatically sort this book\'s contents upon changes.',
-    'books_sort_auto_sort' => 'Auto Sort Option',
-    'books_sort_auto_sort_active' => 'Auto Sort Active: :sortName',
+    'books_sort_auto_sort' => 'Opcja automatycznego sortowania',
+    'books_sort_auto_sort_active' => 'Automatyczne sortowanie aktywne: :sortName',
    'books_sort_named' => 'Sortuj książkę :bookName',
    'books_sort_name' => 'Sortuj według nazwy',
    'books_sort_created' => 'Sortuj według daty utworzenia',
@@ -252,7 +252,7 @@ return [
    'pages_edit_switch_to_markdown_stable' => '(Statyczna zawartość)',
    'pages_edit_switch_to_wysiwyg' => 'Przełącz na edytor WYSIWYG',
    'pages_edit_switch_to_new_wysiwyg' => 'Przełącz na nowy WYSIWYG',
-    'pages_edit_switch_to_new_wysiwyg_desc' => '(In Beta Testing)',
+    'pages_edit_switch_to_new_wysiwyg_desc' => '(W testach beta)',
    'pages_edit_set_changelog' => 'Ustaw dziennik zmian',
    'pages_edit_enter_changelog_desc' => 'Opisz zmiany, które zostały wprowadzone',
    'pages_edit_enter_changelog' => 'Wyświetl dziennik zmian',
@@ -272,7 +272,7 @@ return [
    'pages_md_insert_drawing' => 'Wstaw rysunek',
    'pages_md_show_preview' => 'Pokaż podgląd',
    'pages_md_sync_scroll' => 'Synchronizuj przewijanie podglądu',
-    'pages_md_plain_editor' => 'Plaintext editor',
+    'pages_md_plain_editor' => 'Zwykły edytor',
    'pages_drawing_unsaved' => 'Znaleziono niezapisany rysunek',
    'pages_drawing_unsaved_confirm' => 'Znaleziono niezapisane dane rysowania z poprzedniej nieudanej próby zapisu. Czy chcesz przywrócić i kontynuować edycję tego niezapisanego rysunku?',
    'pages_not_in_chapter' => 'Strona nie została umieszczona w rozdziale',
@@ -397,11 +397,11 @@ return [
    'comment' => 'Komentarz',
    'comments' => 'Komentarze',
    'comment_add' => 'Dodaj komentarz',
-    'comment_none' => 'No comments to display',
+    'comment_none' => 'Brak komentarzy do wyświetlenia',
    'comment_placeholder' => 'Napisz swój komentarz tutaj',
-    'comment_thread_count' => ':count Comment Thread|:count Comment Threads',
-    'comment_archived_count' => ':count Archived',
-    'comment_archived_threads' => 'Archived Threads',
+    'comment_thread_count' => ':count wątek komentarza|:count wątków komentarzy',
+    'comment_archived_count' => ':count zarchiwizowanych',
+    'comment_archived_threads' => 'Zarchiwizowane wątki',
    'comment_save' => 'Zapisz komentarz',
    'comment_new' => 'Nowy komentarz',
    'comment_created' => 'Skomentowano :createDiff',
@@ -410,14 +410,14 @@ return [
    'comment_deleted_success' => 'Komentarz usunięty',
    'comment_created_success' => 'Komentarz dodany',
    'comment_updated_success' => 'Komentarz zaktualizowany',
-    'comment_archive_success' => 'Comment archived',
-    'comment_unarchive_success' => 'Comment un-archived',
-    'comment_view' => 'View comment',
-    'comment_jump_to_thread' => 'Jump to thread',
+    'comment_archive_success' => 'Komentarz zarchiwizowany',
+    'comment_unarchive_success' => 'Komentarz usunięty z archiwum',
+    'comment_view' => 'Zobacz komentarz',
+    'comment_jump_to_thread' => 'Przejdź do wątku',
    'comment_delete_confirm' => 'Czy na pewno chcesz usunąc ten komentarz?',
    'comment_in_reply_to' => 'W odpowiedzi na :commentId',
-    'comment_reference' => 'Reference',
-    'comment_reference_outdated' => '(Outdated)',
+    'comment_reference' => 'Odwołania',
+    'comment_reference_outdated' => '(Przestarzałe)',
    'comment_editor_explain' => 'Oto komentarze pozostawione na tej stronie. Komentarze mogą być dodawane i zarządzane podczas przeglądania zapisanej strony.',

    // Revision
--- a/lang/pl/errors.php
+++ b/lang/pl/errors.php
@@ -106,17 +106,17 @@ return [
    'back_soon' => 'Niedługo zostanie uruchomiona ponownie.',

    // Import
-    'import_zip_cant_read' => 'Could not read ZIP file.',
-    'import_zip_cant_decode_data' => 'Could not find and decode ZIP data.json content.',
-    'import_zip_no_data' => 'ZIP file data has no expected book, chapter or page content.',
-    'import_zip_data_too_large' => 'ZIP data.json content exceeds the configured application maximum upload size.',
-    'import_validation_failed' => 'Import ZIP failed to validate with errors:',
-    'import_zip_failed_notification' => 'Failed to import ZIP file.',
-    'import_perms_books' => 'You are lacking the required permissions to create books.',
-    'import_perms_chapters' => 'You are lacking the required permissions to create chapters.',
-    'import_perms_pages' => 'You are lacking the required permissions to create pages.',
-    'import_perms_images' => 'You are lacking the required permissions to create images.',
-    'import_perms_attachments' => 'You are lacking the required permission to create attachments.',
+    'import_zip_cant_read' => 'Nie można odczytać archiwum ZIP.',
+    'import_zip_cant_decode_data' => 'Nie udało się odnaleźć i dekodować pliku data.json w zawartości archiwum ZIP.',
+    'import_zip_no_data' => 'Dane archiwum ZIP nie zawierają oczekiwanej zawartości książki, rozdziału lub strony.',
+    'import_zip_data_too_large' => 'Zawartość pliku data.json w archiwum ZIP przekracza maksymalny dopuszczalny rozmiar narzucony przez aktualną konfigurację aplikacji.',
+    'import_validation_failed' => 'Walidacja importu archiwum ZIP nie powiodła się z błędami:',
+    'import_zip_failed_notification' => 'Nie udało się zaimportować archiwum ZIP.',
+    'import_perms_books' => 'Brakuje Ci wymaganych uprawnień do tworzenia książek.',
+    'import_perms_chapters' => 'Brakuje Ci wymaganych uprawnień do tworzenia rozdziałów.',
+    'import_perms_pages' => 'Brakuje Ci wymaganych uprawnień do tworzenia stron.',
+    'import_perms_images' => 'Brakuje Ci wymaganych uprawnień do tworzenia zdjęć.',
+    'import_perms_attachments' => 'Brakuje Ci wymaganych uprawnień do tworzenia załączników.',

    // API errors
    'api_no_authorization_found' => 'Nie znaleziono tokenu autoryzacji dla żądania',
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'Podany sekret dla tego API jest nieprawidłowy',
    'api_user_no_api_permission' => 'Właściciel używanego tokenu API nie ma uprawnień do wykonywania zapytań do API',
    'api_user_token_expired' => 'Token uwierzytelniania wygasł',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Błąd podczas wysyłania testowej wiadomości e-mail:',
--- a/lang/pl/notifications.php
+++ b/lang/pl/notifications.php
@@ -11,8 +11,8 @@ return [
    'updated_page_subject' => 'Zaktualizowano stronę: :pageName',
    'updated_page_intro' => 'Strona została zaktualizowana w :appName:',
    'updated_page_debounce' => 'Aby zapobiec nadmiarowi powiadomień, przez jakiś czas nie będziesz otrzymywać powiadomień o dalszych edycjach tej strony przez tego samego edytora.',
-    'comment_mention_subject' => 'You have been mentioned in a comment on page: :pageName',
-    'comment_mention_intro' => 'You were mentioned in a comment on :appName:',
+    'comment_mention_subject' => 'Zostałeś oznaczony w komentarzu na stronie: :pageName',
+    'comment_mention_intro' => 'Zostałeś oznaczony w komentarzu w :appName:',

    'detail_page_name' => 'Nazwa strony:',
    'detail_page_path' => 'Ścieżka strony:',
--- a/lang/pl/preferences.php
+++ b/lang/pl/preferences.php
@@ -23,7 +23,7 @@ return [
    'notifications_desc' => 'Kontroluj otrzymywane powiadomienia e-mail, gdy określona aktywność jest wykonywana w systemie.',
    'notifications_opt_own_page_changes' => 'Powiadom o zmianach na stronach, których jestem właścicielem',
    'notifications_opt_own_page_comments' => 'Powiadom o komentarzach na stronach, których jestem właścicielem',
-    'notifications_opt_comment_mentions' => 'Notify when I\'m mentioned in a comment',
+    'notifications_opt_comment_mentions' => 'Powiadom, kiedy zostanę oznaczony w komentarzu',
    'notifications_opt_comment_replies' => 'Powiadom o odpowiedziach na moje komentarze',
    'notifications_save' => 'Zapisz preferencje',
    'notifications_update_success' => 'Preferencje powiadomień zostały zaktualizowane!',
--- a/lang/pl/settings.php
+++ b/lang/pl/settings.php
@@ -20,12 +20,12 @@ return [
    'app_name_header' => 'Pokaż nazwę aplikacji w nagłówku',
    'app_public_access' => 'Dostęp publiczny',
    'app_public_access_desc' => 'Włączenie tej opcji umożliwi niezalogowanym odwiedzającym dostęp do treści w Twojej instancji BookStack.',
-    'app_public_access_desc_guest' => 'Dostęp dla niezalogowanych odwiedzających jest dostępny poprzez użytkownika "Guest".',
+    'app_public_access_desc_guest' => 'Dostęp dla niezalogowanych odwiedzających jest kontrolowany poprzez użytkownika "Guest".',
    'app_public_access_toggle' => 'Zezwalaj na dostęp publiczny',
    'app_public_viewing' => 'Zezwolić na publiczne przeglądanie?',
-    'app_secure_images' => 'Włączyć przesyłanie obrazów o wyższym poziomie bezpieczeństwa?',
+    'app_secure_images' => 'Bezpieczniejsze przesyłanie obrazów',
    'app_secure_images_toggle' => 'Włącz wyższy poziom bezpieczeństwa dla obrazów',
-    'app_secure_images_desc' => 'Ze względów wydajnościowych wszystkie obrazki są publiczne. Ta opcja dodaje dodatkowy, trudny do odgadnięcia losowy ciąg na początku nazwy obrazka. Upewnij się że indeksowanie katalogów jest zablokowane, aby uniemożliwić łatwy dostęp do obrazków.',
+    'app_secure_images_desc' => 'Ze względu na wydajność systemu wszystkie obrazki są publiczne. Ta opcja dodaje trudny do odgadnięcia losowy ciąg znaków na początku nazwy obrazka. Upewnij się, że indeksowanie katalogów jest wyłączone, aby uniemożliwić łatwy dostęp do obrazków.',
    'app_default_editor' => 'Domyślny edytor stron',
    'app_default_editor_desc' => 'Wybierz, który edytor będzie domyślnie używany podczas edycji nowych stron. Może to być nadpisane na poziomie strony, na którym pozwalają na to uprawnienia.',
    'app_custom_html' => 'Własna zawartość w tagu <head>',
@@ -64,47 +64,47 @@ return [
    'reg_settings' => 'Ustawienia rejestracji',
    'reg_enable' => 'Włącz rejestrację',
    'reg_enable_toggle' => 'Włącz rejestrację',
-    'reg_enable_desc' => 'Po włączeniu rejestracji użytkownicy ci będą mogli się samodzielnie zarejestrować i otrzymają domyślną rolę.',
+    'reg_enable_desc' => 'Przy włączonej rejestracji użytkownicy będą w stanie samodzielnie założyć sobie konto w systemie. Po rejestracji automatycznie otrzymają domyślną rolę.',
    'reg_default_role' => 'Domyślna rola użytkownika po rejestracji',
    'reg_enable_external_warning' => 'Powyższa opcja jest ignorowana, gdy zewnętrzne uwierzytelnianie LDAP lub SAML jest aktywne. Konta użytkowników dla nieistniejących użytkowników zostaną automatycznie utworzone, jeśli uwierzytelnianie za pomocą systemu zewnętrznego zakończy się sukcesem.',
    'reg_email_confirmation' => 'Potwierdzenie adresu email',
    'reg_email_confirmation_toggle' => 'Wymagaj potwierdzenia adresu email',
-    'reg_confirm_email_desc' => 'Jeśli restrykcje domenowe zostały ustawione, potwierdzenie adresu stanie się konieczne, a poniższa wartośc zostanie zignorowana.',
-    'reg_confirm_restrict_domain' => 'Restrykcje domenowe dot. adresu e-mail',
-    'reg_confirm_restrict_domain_desc' => 'Wprowadź listę domen adresów e-mail, rozdzieloną przecinkami, którym chciałbyś zezwolić na rejestrację. Wymusi to konieczność potwierdzenia adresu e-mail przez użytkownika przed uzyskaniem dostępu do aplikacji. <br> Pamiętaj, że użytkownicy będą mogli zmienić adres e-mail po rejestracji.',
+    'reg_confirm_email_desc' => 'Jeśli restrykcje domenowe zostały ustawione, potwierdzenie adresu email stanie się konieczne i ta opcja zostanie zignorowana.',
+    'reg_confirm_restrict_domain' => 'Restrykcje domenowe',
+    'reg_confirm_restrict_domain_desc' => 'Wprowadź listę domen adresów email, rozdzieloną przecinkami, którym chciałbyś zezwolić na rejestrację. Wymusi to konieczność potwierdzenia adresu e-mail przez użytkownika przed uzyskaniem dostępu do aplikacji. <br> Pamiętaj, że użytkownicy będą mogli zmienić adres e-mail po rejestracji.',
    'reg_confirm_restrict_domain_placeholder' => 'Brak restrykcji',

    // Sorting Settings
-    'sorting' => 'Lists & Sorting',
-    'sorting_book_default' => 'Default Book Sort Rule',
-    'sorting_book_default_desc' => 'Select the default sort rule to apply to new books. This won\'t affect existing books, and can be overridden per-book.',
-    'sorting_rules' => 'Sort Rules',
-    'sorting_rules_desc' => 'These are predefined sorting operations which can be applied to content in the system.',
-    'sort_rule_assigned_to_x_books' => 'Assigned to :count Book|Assigned to :count Books',
-    'sort_rule_create' => 'Create Sort Rule',
-    'sort_rule_edit' => 'Edit Sort Rule',
-    'sort_rule_delete' => 'Delete Sort Rule',
-    'sort_rule_delete_desc' => 'Remove this sort rule from the system. Books using this sort will revert to manual sorting.',
-    'sort_rule_delete_warn_books' => 'This sort rule is currently used on :count book(s). Are you sure you want to delete this?',
-    'sort_rule_delete_warn_default' => 'This sort rule is currently used as the default for books. Are you sure you want to delete this?',
-    'sort_rule_details' => 'Sort Rule Details',
-    'sort_rule_details_desc' => 'Set a name for this sort rule, which will appear in lists when users are selecting a sort.',
-    'sort_rule_operations' => 'Sort Operations',
-    'sort_rule_operations_desc' => 'Configure the sort actions to be performed by moving them from the list of available operations. Upon use, the operations will be applied in order, from top to bottom. Any changes made here will be applied to all assigned books upon save.',
-    'sort_rule_available_operations' => 'Available Operations',
-    'sort_rule_available_operations_empty' => 'No operations remaining',
-    'sort_rule_configured_operations' => 'Configured Operations',
-    'sort_rule_configured_operations_empty' => 'Drag/add operations from the "Available Operations" list',
-    'sort_rule_op_asc' => '(Asc)',
-    'sort_rule_op_desc' => '(Desc)',
-    'sort_rule_op_name' => 'Name - Alphabetical',
-    'sort_rule_op_name_numeric' => 'Name - Numeric',
-    'sort_rule_op_created_date' => 'Created Date',
-    'sort_rule_op_updated_date' => 'Updated Date',
-    'sort_rule_op_chapters_first' => 'Chapters First',
-    'sort_rule_op_chapters_last' => 'Chapters Last',
-    'sorting_page_limits' => 'Per-Page Display Limits',
-    'sorting_page_limits_desc' => 'Set how many items to show per-page in various lists within the system. Typically a lower amount will be more performant, while a higher amount avoids the need to click through multiple pages. Using an even multiple of 3 (18, 24, 30, etc...) is recommended.',
+    'sorting' => 'Listy i sortowanie',
+    'sorting_book_default' => 'Domyślna reguła sortowania książek',
+    'sorting_book_default_desc' => 'Wybierz domyślną regułę sortowania dla nowych książek. To nie wpłynie na istniejące książki i może być nadpisane per książka.',
+    'sorting_rules' => 'Reguły sortowania',
+    'sorting_rules_desc' => 'Są to wstępnie zdefiniowane operacje sortowania, które mogą być stosowane do treści w systemie.',
+    'sort_rule_assigned_to_x_books' => 'Przypisane do :count książki|Przypisane do :count książek',
+    'sort_rule_create' => 'Utwórz regułę sortowania',
+    'sort_rule_edit' => 'Edytuj regułę sortowania',
+    'sort_rule_delete' => 'Usuń regułę sortowania',
+    'sort_rule_delete_desc' => 'Usuń tę regułę sortowania z systemu. Książki używające tej reguły powrócą do ręcznego sortowania.',
+    'sort_rule_delete_warn_books' => 'Ta reguła sortowania jest obecnie używana na :count książkach. Czy na pewno chcesz ją usunąć?',
+    'sort_rule_delete_warn_default' => 'Ta reguła sortowania jest obecnie używana jako domyślna dla książek. Czy na pewno chcesz ją usunąć?',
+    'sort_rule_details' => 'Szczegóły reguły sortowania',
+    'sort_rule_details_desc' => 'Ustaw nazwę dla tej reguły sortowania, która pojawi się na listach, gdy użytkownicy skorzystają z sortowania.',
+    'sort_rule_operations' => 'Operacje sortowania',
+    'sort_rule_operations_desc' => 'Skonfiguruj akcje sortowanie do wykonania, przenosząc je z listy dostępnych operacji. Po użyciu operacje zostaną zastosowane w kolejności od góry do dołu. Wszelkie zmiany wprowadzone tutaj zostaną zastosowane do wszystkich przypisanych książek po zapisaniu.',
+    'sort_rule_available_operations' => 'Dostępne operacje',
+    'sort_rule_available_operations_empty' => 'Brak pozostałych operacji',
+    'sort_rule_configured_operations' => 'Skonfigurowane operacje',
+    'sort_rule_configured_operations_empty' => 'Przeciągnij/dodaj operacje z listy "Dostępne Operacje"',
+    'sort_rule_op_asc' => '(rosnąco)',
+    'sort_rule_op_desc' => '(malejąco)',
+    'sort_rule_op_name' => 'Nazwa — alfabetycznie',
+    'sort_rule_op_name_numeric' => 'Nazwa — numerycznie',
+    'sort_rule_op_created_date' => 'Data utworzenia',
+    'sort_rule_op_updated_date' => 'Data aktualizacji',
+    'sort_rule_op_chapters_first' => 'Rozdziały na początku',
+    'sort_rule_op_chapters_last' => 'Rozdziały na końcu',
+    'sorting_page_limits' => 'Limity wyświetlania per strona',
+    'sorting_page_limits_desc' => 'Ustaw ile elementów pokazywać per strona w różnych listach w systemie. Zazwyczaj mniejsza ilość będzie bardziej wydajna, podczas gdy większa ilość unika konieczności przeglądania wielu stron. Zaleca się stosowanie parzystej wielokrotności 3 (18, 24, 30 itp...).',

    // Maintenance settings
    'maint' => 'Konserwacja',
@@ -194,16 +194,16 @@ return [
    'role_access_api' => 'Dostęp do systemowego API',
    'role_manage_settings' => 'Zarządzanie ustawieniami aplikacji',
    'role_export_content' => 'Eksportuj zawartość',
-    'role_import_content' => 'Import content',
+    'role_import_content' => 'Importuj zawartość',
    'role_editor_change' => 'Zmień edytor strony',
    'role_notifications' => 'Odbieranie i zarządzanie powiadomieniami',
-    'role_permission_note_users_and_roles' => 'These permissions will technically also provide visibility & searching of users & roles in the system.',
+    'role_permission_note_users_and_roles' => 'Uprawnienia te mogą zapewnić również widoczność i wyszukiwanie użytkowników i ról w systemie.',
    'role_asset' => 'Zarządzanie zasobami',
    'roles_system_warning' => 'Pamiętaj, że dostęp do trzech powyższych uprawnień może pozwolić użytkownikowi na zmianę własnych uprawnień lub uprawnień innych osób w systemie. Przypisz tylko role z tymi uprawnieniami do zaufanych użytkowników.',
    'role_asset_desc' => 'Te ustawienia kontrolują zarządzanie zasobami systemu. Uprawnienia książek, rozdziałów i stron nadpisują te ustawienia.',
    'role_asset_admins' => 'Administratorzy mają automatycznie dostęp do wszystkich treści, ale te opcję mogą być pokazywać lub ukrywać opcje interfejsu użytkownika.',
    'role_asset_image_view_note' => 'To odnosi się do widoczności w ramach menedżera obrazów. Rzeczywista możliwość dostępu do przesłanych plików obrazów będzie zależeć od systemowej opcji przechowywania obrazów.',
-    'role_asset_users_note' => 'These permissions will technically also provide visibility & searching of users in the system.',
+    'role_asset_users_note' => 'Uprawnienia te mogą zapewnić również widoczność i wyszukiwanie użytkowników w systemie.',
    'role_all' => 'Wszyscy',
    'role_own' => 'Własne',
    'role_controlled_by_asset' => 'Kontrolowane przez zasób, do którego zostały udostępnione',
--- a/lang/pl/validation.php
+++ b/lang/pl/validation.php
@@ -105,11 +105,11 @@ return [
    'url'                  => 'Format :attribute jest nieprawidłowy.',
    'uploaded'             => 'Plik nie może zostać wysłany. Serwer nie akceptuje plików o takim rozmiarze.',

-    'zip_file' => 'The :attribute needs to reference a file within the ZIP.',
-    'zip_file_size' => 'The file :attribute must not exceed :size MB.',
-    'zip_file_mime' => 'The :attribute needs to reference a file of type :validTypes, found :foundType.',
-    'zip_model_expected' => 'Data object expected but ":type" found.',
-    'zip_unique' => 'The :attribute must be unique for the object type within the ZIP.',
+    'zip_file' => ':attribute musi odnosić się do pliku w archiwum ZIP.',
+    'zip_file_size' => 'Plik :attribute nie może przekraczać :size MB.',
+    'zip_file_mime' => ':attribute musi odnosić się do pliku typu :validTypes. Znaleziono :foundType.',
+    'zip_model_expected' => 'Oczekiwano obiektu danych, ale znaleziono ":type".',
+    'zip_unique' => ':attribute musi być unikalny dla typu obiektu w archiwum ZIP.',

    // Custom validation lines
    'custom' => [
--- a/lang/pt/errors.php
+++ b/lang/pt/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'O segredo fornecido para o token de API usado está incorreto',
    'api_user_no_api_permission' => 'O proprietário do token de API utilizado não tem permissão para fazer requisições de API',
    'api_user_token_expired' => 'O token de autenticação expirou',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Erro lançado ao enviar um e-mail de teste:',
--- a/lang/pt_BR/errors.php
+++ b/lang/pt_BR/errors.php
@@ -126,6 +126,7 @@ return [
    'api_incorrect_token_secret' => 'O segredo fornecido para o código de API usado está incorreto',
    'api_user_no_api_permission' => 'O proprietário do código de API utilizado não tem permissão para fazer requisições de API',
    'api_user_token_expired' => 'O código de autenticação expirou',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Erro encontrado ao enviar uma mensagem eletrônica de teste:',
--- a/lang/ro/errors.php
+++ b/lang/ro/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'Secretul furnizat pentru token-ul API folosit este incorect',
    'api_user_no_api_permission' => 'Proprietarul token-ului API folosit nu are permisiunea de a efectua apeluri API',
    'api_user_token_expired' => 'Token-ul de autorizare utilizat a expirat',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Eroare la trimiterea unui e-mail de test:',
--- a/lang/ru/entities.php
+++ b/lang/ru/entities.php
@@ -39,21 +39,21 @@ return [
    'export_pdf' => 'PDF файл',
    'export_text' => 'Текстовый файл',
    'export_md' => 'Файл Markdown',
-    'export_zip' => 'Portable ZIP',
+    'export_zip' => 'Портативный ZIP',
    'default_template' => 'Шаблон страницы по умолчанию',
    'default_template_explain' => 'Назначить шаблон страницы, который будет использоваться в качестве содержимого по умолчанию для всех страниц, созданных в этом элементе. Имейте в виду, что это будет работать, только если создатель страницы имеет доступ к выбранной странице шаблона.',
    'default_template_select' => 'Выберите страницу шаблона',
    'import' => 'Импорт',
-    'import_validate' => 'Validate Import',
+    'import_validate' => 'Проверка импорта',
    'import_desc' => 'Импортировать книги, главы и страницы с помощью ZIP-файла, экспортированного из этого или другого источника. Выберите ZIP-файл, чтобы продолжить. После загрузки и проверки файла вы сможете настроить и подтвердить импорт в следующем окне.',
-    'import_zip_select' => 'Select ZIP file to upload',
-    'import_zip_validation_errors' => 'Errors were detected while validating the provided ZIP file:',
+    'import_zip_select' => 'Выберите ZIP файл для загрузки',
+    'import_zip_validation_errors' => 'Были обнаружены ошибки при проверке предоставленного ZIP файла:',
    'import_pending' => 'Pending Imports',
    'import_pending_none' => 'No imports have been started.',
-    'import_continue' => 'Continue Import',
+    'import_continue' => 'Продолжить импорт',
    'import_continue_desc' => 'Review the content due to be imported from the uploaded ZIP file. When ready, run the import to add its contents to this system. The uploaded ZIP import file will be automatically removed on successful import.',
    'import_details' => 'Import Details',
-    'import_run' => 'Run Import',
+    'import_run' => 'Запустить импорт',
    'import_size' => ':size Import ZIP Size',
    'import_uploaded_at' => 'Uploaded :relativeTime',
    'import_uploaded_by' => 'Uploaded by',
@@ -61,7 +61,7 @@ return [
    'import_location_desc' => 'Select a target location for your imported content. You\'ll need the relevant permissions to create within the location you choose.',
    'import_delete_confirm' => 'Are you sure you want to delete this import?',
    'import_delete_desc' => 'This will delete the uploaded import ZIP file, and cannot be undone.',
-    'import_errors' => 'Import Errors',
+    'import_errors' => 'Ошибки импорта',
    'import_errors_desc' => 'The follow errors occurred during the import attempt:',
    'breadcrumb_siblings_for_page' => 'Navigate siblings for page',
    'breadcrumb_siblings_for_chapter' => 'Navigate siblings for chapter',
--- a/lang/ru/errors.php
+++ b/lang/ru/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'Секрет, предоставленный для данного использованного API токена неверен',
    'api_user_no_api_permission' => 'Владелец используемого API токена не имеет прав на выполнение вызовов API',
    'api_user_token_expired' => 'Срок действия используемого токена авторизации истек',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Ошибка при отправке тестового письма:',
--- a/lang/sk/errors.php
+++ b/lang/sk/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'Secret poskytnutý pre daný token API je nesprávny',
    'api_user_no_api_permission' => 'Vlastník použitého tokenu API nemá povolenie na uskutočňovanie volaní rozhrania API',
    'api_user_token_expired' => 'Platnosť použitého autorizačného tokenu vypršala',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Chyba pri odosielaní testovacieho e-mailu:',
--- a/lang/sl/errors.php
+++ b/lang/sl/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'Skrivnost, ki je bila dana za uporabljeni žeton API, je napačna',
    'api_user_no_api_permission' => 'Lastnik API nima pravic za klicanje API',
    'api_user_token_expired' => 'Avtorizacijski žeton je pretečen',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Napaka se je pojavila pri pošiljanju testne e-pošte:',
--- a/lang/sq/errors.php
+++ b/lang/sq/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'The secret provided for the given used API token is incorrect',
    'api_user_no_api_permission' => 'The owner of the used API token does not have permission to make API calls',
    'api_user_token_expired' => 'The authorization token used has expired',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Error thrown when sending a test email:',
--- a/lang/sr/errors.php
+++ b/lang/sr/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'The secret provided for the given used API token is incorrect',
    'api_user_no_api_permission' => 'The owner of the used API token does not have permission to make API calls',
    'api_user_token_expired' => 'The authorization token used has expired',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Error thrown when sending a test email:',
--- a/lang/sv/entities.php
+++ b/lang/sv/entities.php
@@ -397,7 +397,7 @@ return [
    'comment' => 'Kommentar',
    'comments' => 'Kommentarer',
    'comment_add' => 'Lägg till kommentar',
-    'comment_none' => 'No comments to display',
+    'comment_none' => 'Inga kommentarer att visa',
    'comment_placeholder' => 'Lämna en kommentar här',
    'comment_thread_count' => ':count Comment Thread|:count Comment Threads',
    'comment_archived_count' => ':count Archived',
--- a/lang/sv/errors.php
+++ b/lang/sv/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'Hemligheten för den angivna API-token är felaktig',
    'api_user_no_api_permission' => 'Ägaren av den använda API-token har inte behörighet att göra API-anrop',
    'api_user_token_expired' => 'Den använda auktoriseringstoken har löpt ut',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Ett fel uppstod när ett test mail skulle skickas:',
--- a/lang/sv/preferences.php
+++ b/lang/sv/preferences.php
@@ -5,7 +5,7 @@
 */

 return [
-    'my_account' => 'My Account',
+    'my_account' => 'Mitt Konto',

    'shortcuts' => 'Genvägar',
    'shortcuts_interface' => 'UI Shortcut Preferences',
--- a/lang/tk/errors.php
+++ b/lang/tk/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'The secret provided for the given used API token is incorrect',
    'api_user_no_api_permission' => 'The owner of the used API token does not have permission to make API calls',
    'api_user_token_expired' => 'The authorization token used has expired',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Error thrown when sending a test email:',
--- a/lang/tr/errors.php
+++ b/lang/tr/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'Kullanılan API için sağlanan gizli anahtar doğru değil',
    'api_user_no_api_permission' => 'Kullanılan API anahtarının sahibi API çağrısı yapmak için izne sahip değil',
    'api_user_token_expired' => 'Kullanılan yetkilendirme anahtarının süresi doldu',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Test e-postası gönderilirken bir hata meydana geldi:',
--- a/lang/uk/errors.php
+++ b/lang/uk/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'Секрет, наданий для даного використовуваного токена API є неправильним',
    'api_user_no_api_permission' => 'Власник використовуваного токена API не має дозволу здійснювати виклики API',
    'api_user_token_expired' => 'Термін дії токена авторизації закінчився',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Помилка під час надсилання тестового електронного листа:',
--- a/lang/uz/errors.php
+++ b/lang/uz/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'Foydalanilgan API tokeni uchun berilgan sir notoʻgʻri',
    'api_user_no_api_permission' => 'Foydalanilgan API tokeni egasi API qoʻngʻiroqlarini amalga oshirishga ruxsatga ega emas',
    'api_user_token_expired' => 'Amaldagi avtorizatsiya tokeni muddati tugagan',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Sinov xatini yuborishda xatolik yuz berdi:',
--- a/lang/vi/errors.php
+++ b/lang/vi/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => 'Mã bí mật được cung cấp cho token API đang được sử dụng không hợp lệ',
    'api_user_no_api_permission' => 'Chủ của token API đang sử dụng không có quyền gọi API',
    'api_user_token_expired' => 'Token sử dụng cho việc ủy quyền đã hết hạn',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => 'Lỗi khi gửi email thử:',
--- a/lang/zh_CN/editor.php
+++ b/lang/zh_CN/editor.php
@@ -48,7 +48,7 @@ return [
    'superscript' => '上标',
    'subscript' => '下标',
    'text_color' => '文本颜色',
-    'highlight_color' => 'Highlight color',
+    'highlight_color' => '高亮颜色',
    'custom_color' => '自定义颜色',
    'remove_color' => '移除颜色',
    'background_color' => '背景色',
--- a/lang/zh_CN/entities.php
+++ b/lang/zh_CN/entities.php
@@ -63,10 +63,10 @@ return [
    'import_delete_desc' => '这将删除上传的ZIP文件，不能撤消。',
    'import_errors' => '导入错误',
    'import_errors_desc' => '在尝试导入过程中出现了以下错误:',
-    'breadcrumb_siblings_for_page' => 'Navigate siblings for page',
-    'breadcrumb_siblings_for_chapter' => 'Navigate siblings for chapter',
-    'breadcrumb_siblings_for_book' => 'Navigate siblings for book',
-    'breadcrumb_siblings_for_bookshelf' => 'Navigate siblings for shelf',
+    'breadcrumb_siblings_for_page' => '导航页面',
+    'breadcrumb_siblings_for_chapter' => '导航章节',
+    'breadcrumb_siblings_for_book' => '导航书籍',
+    'breadcrumb_siblings_for_bookshelf' => '导航书架',

    // Permissions and restrictions
    'permissions' => '权限',
@@ -399,7 +399,7 @@ return [
    'comment_add' => '添加评论',
    'comment_none' => '没有要显示的评论',
    'comment_placeholder' => '在这里评论',
-    'comment_thread_count' => ':count Comment Thread|:count Comment Threads',
+    'comment_thread_count' => ':count 条',
    'comment_archived_count' => ':count 条评论已存档',
    'comment_archived_threads' => '已存档的贴子',
    'comment_save' => '保存评论',
--- a/lang/zh_CN/errors.php
+++ b/lang/zh_CN/errors.php
@@ -109,7 +109,7 @@ return [
    'import_zip_cant_read' => '无法读取 ZIP 文件。',
    'import_zip_cant_decode_data' => '无法找到并解码 ZIP data.json 内容。',
    'import_zip_no_data' => 'ZIP 文件数据没有预期的书籍、章节或页面内容。',
-    'import_zip_data_too_large' => 'ZIP data.json content exceeds the configured application maximum upload size.',
+    'import_zip_data_too_large' => '超出最大上传大小。',
    'import_validation_failed' => '导入 ZIP 验证失败，出现错误：',
    'import_zip_failed_notification' => 'ZIP 文件导入失败。',
    'import_perms_books' => '您缺少创建书籍所需的权限。',
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => '给已给出的API所提供的密钥不正确',
    'api_user_no_api_permission' => '使用过的 API 令牌的所有者没有进行API 调用的权限',
    'api_user_token_expired' => '所使用的身份令牌已过期',
+    'api_cookie_auth_only_get' => '使用基于 Cookie 的身份验证 API 时，仅允许 GET 请求。',

    // Settings & Maintenance
    'maintenance_test_email_failure' => '发送测试电子邮件时出现错误：',
--- a/lang/zh_CN/notifications.php
+++ b/lang/zh_CN/notifications.php
@@ -11,8 +11,8 @@ return [
    'updated_page_subject' => '页面更新：:pageName',
    'updated_page_intro' => ':appName: 中的一个页面已被更新',
    'updated_page_debounce' => '为了防止出现大量通知，一段时间内您不会收到同一编辑者再次编辑本页面的通知。',
-    'comment_mention_subject' => 'You have been mentioned in a comment on page: :pageName',
-    'comment_mention_intro' => 'You were mentioned in a comment on :appName:',
+    'comment_mention_subject' => '在页面中被提及：:pageName',
+    'comment_mention_intro' => '在 :appName 中被提及：',

    'detail_page_name' => '页面名称：',
    'detail_page_path' => '页面路径：',
--- a/lang/zh_CN/preferences.php
+++ b/lang/zh_CN/preferences.php
@@ -23,7 +23,7 @@ return [
    'notifications_desc' => '控制在系统内发生某些活动时您会收到的电子邮件通知。',
    'notifications_opt_own_page_changes' => '在我拥有的页面被修改时通知我',
    'notifications_opt_own_page_comments' => '在我拥有的页面上有新评论时通知我',
-    'notifications_opt_comment_mentions' => 'Notify when I\'m mentioned in a comment',
+    'notifications_opt_comment_mentions' => '当我在评论中被提及时通知我',
    'notifications_opt_comment_replies' => '在有人回复我的频率时通知我',
    'notifications_save' => '保存偏好设置',
    'notifications_update_success' => '通知偏好设置已更新！',
--- a/lang/zh_CN/settings.php
+++ b/lang/zh_CN/settings.php
@@ -75,8 +75,8 @@ return [
    'reg_confirm_restrict_domain_placeholder' => '尚未设置限制',

    // Sorting Settings
-    'sorting' => 'Lists & Sorting',
-    'sorting_book_default' => 'Default Book Sort Rule',
+    'sorting' => '列表和排序',
+    'sorting_book_default' => '默认排序规则',
    'sorting_book_default_desc' => '选择要应用于新书的默认排序规则。这不会影响现有书，并且可以每本书覆盖。',
    'sorting_rules' => '排序规则',
    'sorting_rules_desc' => '这些是预定义的排序操作，可应用于系统中的内容。',
@@ -103,8 +103,8 @@ return [
    'sort_rule_op_updated_date' => '更新时间',
    'sort_rule_op_chapters_first' => '章节正序',
    'sort_rule_op_chapters_last' => '章节倒序',
-    'sorting_page_limits' => 'Per-Page Display Limits',
-    'sorting_page_limits_desc' => 'Set how many items to show per-page in various lists within the system. Typically a lower amount will be more performant, while a higher amount avoids the need to click through multiple pages. Using an even multiple of 3 (18, 24, 30, etc...) is recommended.',
+    'sorting_page_limits' => '每页显示限制',
+    'sorting_page_limits_desc' => '设置系统中各种列表每页显示的项目数。通常，项目数越少性能越好，而项目数越多可以避免用户点击多个页面。建议使用 3 的整数倍（例如 18、24、30 等）。',

    // Maintenance settings
    'maint' => '维护',
@@ -197,13 +197,13 @@ return [
    'role_import_content' => '导入内容',
    'role_editor_change' => '更改页面编辑器',
    'role_notifications' => '管理和接收通知',
-    'role_permission_note_users_and_roles' => 'These permissions will technically also provide visibility & searching of users & roles in the system.',
+    'role_permission_note_users_and_roles' => '从技术上讲，这些权限还将提供对系统中用户和角色的可见性和搜索功能。',
    'role_asset' => '资源许可',
    'roles_system_warning' => '请注意，拥有以上三个权限中的任何一个都会允许用户更改自己的权限或系统中其他人的权限。 请只将拥有这些权限的角色分配给你信任的用户。',
    'role_asset_desc' => '对系统内资源的默认访问许可将由这些权限控制。单独设置在书籍、章节和页面上的权限将覆盖这里的权限设定。',
    'role_asset_admins' => '管理员可自动获得对所有内容的访问权限，但这些选项可能会显示或隐藏UI选项。',
    'role_asset_image_view_note' => '这与图像管理器中的可见性有关。已经上传的图片的实际访问取决于系统图像存储选项。',
-    'role_asset_users_note' => 'These permissions will technically also provide visibility & searching of users in the system.',
+    'role_asset_users_note' => '从技术上讲，这些权限还将提供对系统中用户和角色的可见性和搜索功能。',
    'role_all' => '全部的',
    'role_own' => '拥有的',
    'role_controlled_by_asset' => '由其所在的资源来控制',
--- a/lang/zh_CN/validation.php
+++ b/lang/zh_CN/validation.php
@@ -106,7 +106,7 @@ return [
    'uploaded'             => '无法上传文件。 服务器可能不接受此大小的文件。',

    'zip_file' => ':attribute 需要引用 ZIP 内的文件。',
-    'zip_file_size' => 'The file :attribute must not exceed :size MB.',
+    'zip_file_size' => ':attribute 不能超过 :size MB 。',
    'zip_file_mime' => ':attribute 需要引用类型为 :validTypes 的文件，找到 :foundType 。',
    'zip_model_expected' => '预期的数据对象，但找到了 ":type" 。',
    'zip_unique' => '对于 ZIP 中的对象类型来说，:attribute 必须是唯一的。',
--- a/lang/zh_TW/errors.php
+++ b/lang/zh_TW/errors.php
@@ -125,6 +125,7 @@ return [
    'api_incorrect_token_secret' => '給定使用的 API 權杖的密碼錯誤',
    'api_user_no_api_permission' => '使用的 API 權杖擁有者無權呼叫 API',
    'api_user_token_expired' => '使用的授權權杖已過期',
+    'api_cookie_auth_only_get' => 'Only GET requests are allowed when using the API with cookie-based authentication',

    // Settings & Maintenance
    'maintenance_test_email_failure' => '寄送測試電子郵件時發生錯誤:',
--- a/tests/Api/ApiAuthTest.php
+++ b/tests/Api/ApiAuthTest.php
@@ -24,7 +24,8 @@ class ApiAuthTest extends TestCase

        $this->actingAs($viewer, 'standard');

-        $resp = $this->get($this->endpoint);
+        $this->startSession();
+        $resp = $this->withCredentials()->get($this->endpoint);
        $resp->assertStatus(200);
    }

@@ -75,6 +76,7 @@ class ApiAuthTest extends TestCase
    {
        $editor = $this->users->editor();
        $this->actingAs($editor, 'standard');
+        $this->startSession();

        $resp = $this->get($this->endpoint);
        $resp->assertStatus(200);
@@ -112,6 +114,28 @@ class ApiAuthTest extends TestCase
        $resp->assertStatus(200);
    }

+    public function test_only_get_requests_are_supported_with_session_auth()
+    {
+        $user = $this->users->admin();
+        $this->actingAs($user, 'standard');
+        $this->startSession();
+
+        $uriByMethods = [
+            'POST' => '/books',
+            'PUT' => '/books/1',
+            'DELETE' => '/books/1',
+            'HEAD' => '/books',
+        ];
+
+        foreach ($uriByMethods as $method => $uri) {
+            $resp = $this->withCredentials()->json($method, "/api{$uri}");
+            $resp->assertStatus(403);
+            if ($method !== 'HEAD') {
+                $resp->assertJson($this->errorResponse('Only GET requests are allowed when using the API with cookie-based authentication', 403));
+            }
+        }
+    }
+
    public function test_token_expiry_checked()
    {
        $editor = $this->users->editor();
--- a/tests/Api/ChaptersApiTest.php
+++ b/tests/Api/ChaptersApiTest.php
@@ -252,7 +252,7 @@ class ChaptersApiTest extends TestCase
    {
        $editor = $this->users->editor();
        $this->permissions->removeUserRolePermissions($editor, ['chapter-delete-all', 'chapter-delete-own']);
-        $this->actingAs($editor);
+        $this->actingAsForApi($editor);
        $chapter = $this->entities->chapterHasPages();
        $newBook = Book::query()->where('id', '!=', $chapter->book_id)->first();

--- a/tests/Api/RecycleBinApiTest.php
+++ b/tests/Api/RecycleBinApiTest.php
@@ -23,7 +23,7 @@ class RecycleBinApiTest extends TestCase
    {
        $editor = $this->users->editor();
        $this->permissions->grantUserRolePermissions($editor, ['settings-manage']);
-        $this->actingAs($editor);
+        $this->actingAsForApi($editor);

        foreach ($this->endpointMap as [$method, $uri]) {
            $resp = $this->json($method, $uri);
@@ -36,7 +36,7 @@ class RecycleBinApiTest extends TestCase
    {
        $editor = $this->users->editor();
        $this->permissions->grantUserRolePermissions($editor, ['restrictions-manage-all']);
-        $this->actingAs($editor);
+        $this->actingAsForApi($editor);

        foreach ($this->endpointMap as [$method, $uri]) {
            $resp = $this->json($method, $uri);
@@ -53,6 +53,7 @@ class RecycleBinApiTest extends TestCase
        $book = $this->entities->book();
        $this->actingAs($admin)->delete($page->getUrl());
        $this->delete($book->getUrl());
+        $this->actingAsForApi($admin);

        $deletions = Deletion::query()->orderBy('id')->get();

@@ -89,7 +90,7 @@ class RecycleBinApiTest extends TestCase

        $deletion = Deletion::query()->orderBy('id')->first();

-        $resp = $this->getJson($this->baseEndpoint);
+        $resp = $this->actingAsForApi($admin)->getJson($this->baseEndpoint);

        $expectedData = [
            [
@@ -115,6 +116,7 @@ class RecycleBinApiTest extends TestCase
        $this->actingAs($admin)->delete($page->getUrl());
        $deletion = Deletion::query()->orderBy('id')->first();

+        $this->actingAsForApi($admin);
        $resp = $this->getJson($this->baseEndpoint);

        $expectedData = [
@@ -141,6 +143,7 @@ class RecycleBinApiTest extends TestCase
        $page = $this->entities->page();
        $this->asAdmin()->delete($page->getUrl());
        $page->refresh();
+        $this->actingAsApiAdmin();

        $deletion = Deletion::query()->orderBy('id')->first();

@@ -165,6 +168,7 @@ class RecycleBinApiTest extends TestCase
        $page = $this->entities->page();
        $this->asAdmin()->delete($page->getUrl());
        $page->refresh();
+        $this->actingAsApiAdmin();

        $deletion = Deletion::query()->orderBy('id')->first();

--- a/tests/Api/UsersApiTest.php
+++ b/tests/Api/UsersApiTest.php
@@ -80,7 +80,7 @@ class UsersApiTest extends TestCase
        /** @var ActivityModel $activity */
        $activity = ActivityModel::query()->where('user_id', '=', $user->id)->latest()->first();

-        $resp = $this->asAdmin()->getJson($this->baseEndpoint . '?filter[id]=3');
+        $resp = $this->actingAsApiAdmin()->getJson($this->baseEndpoint . '?filter[id]=3');
        $resp->assertJson(['data' => [
            [
                'id'          => $user->id,
--- a/tests/Entity/PageContentTest.php
+++ b/tests/Entity/PageContentTest.php
@@ -208,11 +208,11 @@ class PageContentTest extends TestCase
    public function test_form_actions_with_javascript_are_removed()
    {
        $checks = [
-            '<form><input id="xss" type=submit formaction=javascript:alert(document.domain) value=Submit><input></form>',
-            '<form ><button id="xss" formaction="JaVaScRiPt:alert(document.domain)">Click me</button></form>',
-            '<form ><button id="xss" formaction=javascript:alert(document.domain)>Click me</button></form>',
-            '<form id="xss" action=javascript:alert(document.domain)><input type=submit value=Submit></form>',
-            '<form id="xss" action="JaVaScRiPt:alert(document.domain)"><input type=submit value=Submit></form>',
+            '<customform><custominput id="xss" type=submit formaction=javascript:alert(document.domain) value=Submit><custominput></customform>',
+            '<customform ><custombutton id="xss" formaction="JaVaScRiPt:alert(document.domain)">Click me</custombutton></customform>',
+            '<customform ><custombutton id="xss" formaction=javascript:alert(document.domain)>Click me</custombutton></customform>',
+            '<customform id="xss" action=javascript:alert(document.domain)><input type=submit value=Submit></customform>',
+            '<customform id="xss" action="JaVaScRiPt:alert(document.domain)"><input type=submit value=Submit></customform>',
        ];

        $this->asEditor();
@@ -224,11 +224,101 @@ class PageContentTest extends TestCase

            $pageView = $this->get($page->getUrl());
            $pageView->assertStatus(200);
-            $this->withHtml($pageView)->assertElementNotContains('.page-content', '<button id="xss"');
-            $this->withHtml($pageView)->assertElementNotContains('.page-content', '<input id="xss"');
-            $this->withHtml($pageView)->assertElementNotContains('.page-content', '<form id="xss"');
-            $this->withHtml($pageView)->assertElementNotContains('.page-content', 'action=javascript:');
-            $this->withHtml($pageView)->assertElementNotContains('.page-content', 'formaction=javascript:');
+            $pageView->assertDontSee('id="xss"', false);
+            $pageView->assertDontSee('action=javascript:', false);
+            $pageView->assertDontSee('action=JaVaScRiPt:', false);
+            $pageView->assertDontSee('formaction=javascript:', false);
+            $pageView->assertDontSee('formaction=JaVaScRiPt:', false);
+        }
+    }
+
+    public function test_form_elements_are_removed()
+    {
+        $checks = [
+            '<p>thisisacattofind</p><form>thisdogshouldnotbefound</form>',
+            '<p>thisisacattofind</p><input type="text" value="thisdogshouldnotbefound">',
+            '<p>thisisacattofind</p><select><option>thisdogshouldnotbefound</option></select>',
+            '<p>thisisacattofind</p><textarea>thisdogshouldnotbefound</textarea>',
+            '<p>thisisacattofind</p><fieldset>thisdogshouldnotbefound</fieldset>',
+            '<p>thisisacattofind</p><button>thisdogshouldnotbefound</button>',
+            '<p>thisisacattofind</p><BUTTON>thisdogshouldnotbefound</BUTTON>',
+            <<<'TESTCASE'
+<svg width="200" height="100" xmlns="http://www.w3.org/2000/svg">
+  <foreignObject width="100%" height="100%">
+    
+    <body xmlns="http://www.w3.org/1999/xhtml">
+    <p>thisisacattofind</p>
+      <form>
+        <p>thisdogshouldnotbefound</p>
+      </form>
+      <input type="text" placeholder="thisdogshouldnotbefound" />
+      <button type="submit">thisdogshouldnotbefound</button>
+    </body>
+
+  </foreignObject>
+</svg>
+TESTCASE
+
+        ];
+
+        $this->asEditor();
+        $page = $this->entities->page();
+
+        foreach ($checks as $check) {
+            $page->html = $check;
+            $page->save();
+
+            $pageView = $this->get($page->getUrl());
+            $pageView->assertStatus(200);
+            $pageView->assertSee('thisisacattofind');
+            $pageView->assertDontSee('thisdogshouldnotbefound');
+        }
+    }
+
+    public function test_form_attributes_are_removed()
+    {
+        $withinSvgSample = <<<'TESTCASE'
+<svg width="200" height="100" xmlns="http://www.w3.org/2000/svg">
+  <foreignObject width="100%" height="100%">
+    
+    <body xmlns="http://www.w3.org/1999/xhtml">
+    <p formaction="a">thisisacattofind</p>
+    <p formaction="a">thisisacattofind</p>
+    </body>
+
+  </foreignObject>
+</svg>
+TESTCASE;
+
+        $checks = [
+            'formaction' => '<p formaction="a">thisisacattofind</p>',
+            'form' => '<p form="a">thisisacattofind</p>',
+            'formmethod' => '<p formmethod="a">thisisacattofind</p>',
+            'formtarget' => '<p formtarget="a">thisisacattofind</p>',
+            'FORMTARGET' => '<p FORMTARGET="a">thisisacattofind</p>',
+        ];
+
+        $this->asEditor();
+        $page = $this->entities->page();
+
+        foreach ($checks as $attribute => $check) {
+            $page->html = $check;
+            $page->save();
+
+            $pageView = $this->get($page->getUrl());
+            $pageView->assertStatus(200);
+            $pageView->assertSee('thisisacattofind');
+            $this->withHtml($pageView)->assertElementNotExists(".page-content [{$attribute}]");
+        }
+
+        $page->html = $withinSvgSample;
+        $page->save();
+        $pageView = $this->get($page->getUrl());
+        $pageView->assertStatus(200);
+        $html = $this->withHtml($pageView);
+        foreach ($checks as $attribute => $check) {
+            $pageView->assertSee('thisisacattofind');
+            $html->assertElementNotExists(".page-content [{$attribute}]");
        }
    }
Author	SHA1	Message	Date
Dan Brown	4fe0f6132b	New translations errors.php (French)	2026-02-04 14:44:44 +00:00
Dan Brown	c008dd76d7	New translations preferences.php (Swedish)	2026-02-04 05:21:00 +00:00
Dan Brown	119fcada30	New translations entities.php (Swedish)	2026-02-04 05:20:59 +00:00
Dan Brown	ad60ac905f	New translations notifications.php (Chinese Simplified)	2026-02-01 23:26:16 +00:00
Dan Brown	cd5f1620f1	New translations preferences.php (Chinese Simplified)	2026-02-01 23:26:14 +00:00
Dan Brown	aa341bdfdf	New translations editor.php (Chinese Simplified)	2026-02-01 23:26:13 +00:00
Dan Brown	cd2f4f290a	New translations validation.php (Chinese Simplified)	2026-02-01 23:26:12 +00:00
Dan Brown	06d66222e4	New translations settings.php (Chinese Simplified)	2026-02-01 23:26:11 +00:00
Dan Brown	09774817ef	New translations errors.php (Chinese Simplified)	2026-02-01 23:26:10 +00:00
Dan Brown	258b6d4b95	New translations entities.php (Chinese Simplified)	2026-02-01 23:26:09 +00:00
Dan Brown	ce99a1aee7	New translations errors.php (Japanese)	2026-02-01 03:30:59 +00:00
Dan Brown	9c09f6a770	New translations entities.php (Russian)	2026-01-30 13:19:15 +00:00
Dan Brown	63fcd09d87	New translations errors.php (Spanish)	2026-01-29 22:45:14 +00:00
Dan Brown	509c739c66	New translations errors.php (Czech)	2026-01-29 19:08:45 +00:00
Dan Brown	46dcc30bf7	Updated translator & dependency attribution before release v25.12.3	2026-01-29 15:18:06 +00:00
Dan Brown	9f7d3b55dd	Updated translations with latest Crowdin changes (#5997 )	2026-01-29 15:11:40 +00:00
Dan Brown	3e5e88dc87	Deps: Updated PHP package versions via composer	2026-01-29 14:57:05 +00:00
Dan Brown	c77a0fdff3	Page Content: Added form elements to filtering Added and updated tests to cover. Also updated API auth to a narrower focus of existing session instead of also existing user auth. This is mainly for tests, to ensure they're following the session process we'd see for activity in the UI.	2026-01-29 14:54:08 +00:00
Dan Brown	6a63b38bb3	API: Prevented non-GET requests when using cookie-based auth Added test to cover.	2026-01-29 03:37:16 +00:00