fix possible XSS

https://www.openbugbounty.org/reports/2315738/

__prefix__ was substituted with decoded URL and could be hijacked with a
crafted query parameter. Now the urlencoded variant is used, the decoded
variant is only left to calculate the string size.

GitHub -> sourcehut

IfModule mod_rewrite.c

use Text::Markdown::Discount if possible

expose hidden subdirs if hit

strip extension in all path components

fix multiple _ in filename

Update README.md

Version 20121129

fix Markdown vs. markdown

README.md

AGPL instead of CC-BY-SA

20120408 broke lighttpd

fix safari urlencoding

default $menulevel=1 and fix empty <ul></ul>

QSA

pprefix in $template, too

subst prefix and pprefix ($abs) even in $content

avoid uninitialized value $pagetitle

take length of appended QUERY_STRING in count