And for anonymous users in the frontend, like the search plugin ?

Thx --Michi

Is there an option searching for images, thus their associated description, title etc. ?
I didn't find anything related.

Thx --Michi

I located the problem, and it is not a serendipity problem.
We are running serendipity behind our self-written authentication portal (on a different host with an according event plugin). There is a bug in the portal, which overwrites the Last-modified header sent by serendipity.

Thx --Michi

I think Last-modified and Etag should not be different, but they are.
Reloading the Livebookmark produces the following, and then the bookmarrk is empty:

https://gondor-dev.magwien.gv.at/gsa/serendipity/index.php?/feeds/index.rss2

GET /gsa/serendipity/index.php?/feeds/index.rss2 HTTP/1.1
Host ...

serendipity 1.2
I assume Last-modifed header is used twice with different purposes:
serendipity/bundled-libs/Smarty/libs/Smarty.class.php
serendipity/rss.php
This may lead to a "200 OK" response with an empty list instead of "304 Not Modifed",
thus the feedreader (at least Firefox Livebookmarks ...

Is it possible to disable HTML in entries ?
e.g. to avoid <script>alert("You are hacked!!!")</script>
from suspect authors ?

Best regards --Michi

I successfully login to the administrator page, but when clicking any function, the login page is displayed again.
The client browser contacts our enterprise portal (which does authentication, beside many other things), which in turn contacts the serendipity host, which is different from the portal ...