WordPress-C
/
WordPress
mirror of https://github.com/WordPress/WordPress.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
23,902 Commits 50 Branches 749 Tags 981 MiB
Commit Graph

11789 Commits

Author SHA1 Message Date
Peter Wilson b11364d66a WordPress 3.7.41. 
Built from https://develop.svn.wordpress.org/branches/3.7@54908


git-svn-id: http://core.svn.wordpress.org/branches/3.7@54460 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2022-11-30 00:19:10 +00:00
Peter Wilson 177c730e70 Security: Replace update nag to indicate end of support. 
Replace update nag in WordPress 3.7 to indicate users need to update to a newer version of WordPress in order to continue receiving security updates.

Props peterwilsoncc, audrasjb.
Fixes #56786 for the 3.7 branch.


Built from https://develop.svn.wordpress.org/branches/3.7@54901


git-svn-id: http://core.svn.wordpress.org/branches/3.7@54453 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2022-11-29 22:06:11 +00:00
Sergey Biryukov 58555d9e66 WordPress 3.7.40. 
Built from https://develop.svn.wordpress.org/branches/3.7@54575


git-svn-id: http://core.svn.wordpress.org/branches/3.7@54129 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2022-10-17 19:37:12 +00:00
Peter Wilson 7a9f94a313 Security: Introduce strings to indicate support status. 
Add strings for use in future maintenance/security releases to indicate the security support status of the version of WordPress.

Two strings are introduced:

* indicating the version of WordPress is not receiving security updates, and,
* indicating the version of WordPress will shortly stop receiving security updates.

This change does not make use of the strings, the purpose is to make them available to translators prior to dropping support of selected versions of WordPress.

Props costdev, chesio, robinwpdeveloper, desrosj, rudlinkon, mukesh27, sumitbagthariya16.
Merges [54322] to the 3.7 branch.
See #56532.

Built from https://develop.svn.wordpress.org/branches/3.7@54463


git-svn-id: http://core.svn.wordpress.org/branches/3.7@54022 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2022-10-10 22:32:11 +00:00
desrosj bb4970c34d WordPress 3.7.39. 
Built from https://develop.svn.wordpress.org/branches/3.7@54010


git-svn-id: http://core.svn.wordpress.org/branches/3.7@53569 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2022-08-30 17:39:28 +00:00
Sergey Biryukov cd1be7b95f Grouped backports to the 3.7 branch. 
- Posts, Post Types: Escape output within `the_meta()`.
- General: Ensure bookmark query limits are numeric.
- Plugins: Escape output in error messages.

Merges [53958-53960] to the 3.7 branch.
Props tykoted, martinkrcho, xknown, dd32, peterwilsoncc, paulkevan, timothyblynjacobs.

Built from https://develop.svn.wordpress.org/branches/3.7@53986


git-svn-id: http://core.svn.wordpress.org/branches/3.7@53545 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2022-08-30 15:57:11 +00:00
Sergey Biryukov ef39233c64 WordPress 3.7.38. 
Built from https://develop.svn.wordpress.org/branches/3.7@52876


git-svn-id: http://core.svn.wordpress.org/branches/3.7@52465 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2022-03-10 22:03:56 +00:00
desrosj d81947b924 WordPress 3.7.37. 
Built from https://develop.svn.wordpress.org/branches/3.7@52508


git-svn-id: http://core.svn.wordpress.org/branches/3.7@52100 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2022-01-06 18:57:58 +00:00
desrosj f2afd78e41 Grouped backports to the 3.7 branch. 
- Query: Improve sanitization within `WP_Tax_Query`.
- Upgrade/Install: Avoid using `unserialize()` unnecessarily.
- Formatting: Correctly encode ASCII characters in post slugs.

Merges [52454,52456-52457] to the 3.7 branch.
Props vortfu, dd32, ehtis, zieladam, whyisjake, xknown, peterwilsoncc, desrosj, iandunn.
Built from https://develop.svn.wordpress.org/branches/3.7@52486


git-svn-id: http://core.svn.wordpress.org/branches/3.7@52078 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2022-01-06 18:28:11 +00:00
Peter Wilson f4541c7f15 WordPress 3.7.36. 
Built from https://develop.svn.wordpress.org/branches/3.7@50889


git-svn-id: http://core.svn.wordpress.org/branches/3.7@50498 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2021-05-12 23:26:22 +00:00
desrosj 34cf51116a Build/Test Tools: Backport GitHub Action and build improvements to the 3.7 branch. 
This backports several build and test tool improvements to the 3.7 branch. Most notably, this includes:

- The changes required to allow each workflow to be triggered by the `workflow_dispatch` event so that tests can be run on a schedule [50590].
- Splitting single site and multisite tests into parallel jobs [50379].
- Split slow tests into separate, parallel jobs for PHP <= 5.6 [50444].
- Better branch and path scoping for GitHub Action workflows when running on `pull_request` [50432,50479].
- Several `devDependency` updates.

Merges [50379,50387,50413,50416,50432,50435,50436,50444,50446,50473,50474,50476,50479,50485,50486,50487,50545,50579,50590] to the 3.7 branch.
See #50401, #51801, #51802, #52548, #52608, #52612, #52624, #52625, #52645, #52653, #52658, #52660, #52667.
Built from https://develop.svn.wordpress.org/branches/3.7@50626


git-svn-id: http://core.svn.wordpress.org/branches/3.7@50238 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2021-03-31 19:52:14 +00:00
desrosj c910eb3f66 Build/Test Tools: Support NodeJS 14.x in the 3.7 branch. 
This updates the 3.7 branch to support the latest LTS version of NodeJS (currently 14.x), allowing the same version to be used across all WordPress branches that receive security updates as a courtesy.

Because older branches use (really) old versions of NodeJS, the local Docker environment cannot be backported since the needed dependencies will not run on these older versions (see #48301). This also blocks the ability to move automated testing over to GitHub Actions (see #50401).

This change also introduces a `packager-lock.json` file to the branch.

In addition to backporting the package updates that happened after branching 3.7, dependencies that were removed in future releases have also been updated to their latest versions.

Props desrosj, dd32, netweb, jorbin.
Merges [27053,27299,27721,27848,28796,29270,30060,30062-30063,30066,31557,31650,32356,32988,33726,35513,35521,35538,35540-35541,36861-36865,37019-37020,37212,37612,38111,39113,39115-39117,39478,42460-42461,42887,42989,43320,43323,43977,44219,45446,45765,46408-46409,47867,47872,48705,49636,49933,49939,50185] to the 3.7 branch.
See #52341.
Built from https://develop.svn.wordpress.org/branches/3.7@50224


git-svn-id: http://core.svn.wordpress.org/branches/3.7@49888 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2021-02-05 04:48:20 +00:00
desrosj 0e07ae3292 WordPress 3.7.35. 
Built from https://develop.svn.wordpress.org/branches/3.7@49427


git-svn-id: http://core.svn.wordpress.org/branches/3.7@49186 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2020-10-29 19:43:26 +00:00
whyisjake 473e6b721a General: WordPress updates 
* XML-RPC: Improve error messages for unprivileged users.
* External Libraries: Disable deserialization in Requests_Utility_FilteredIterator
* Embeds: Disable embeds on deactivated Multisite sites.
* Coding standards: Modify escaping functions to avoid potential false positives.
* XML-RPC: Return error message if attachment ID is incorrect.
* Upgrade/install: Improve logic check when determining installation status.
* Meta: Sanitize meta key before checking protection status.
* Themes: Ensure that only privileged users can set a background image when a theme is using the deprecated custom background page.

Brings the changes from [49380,49382-49388] to the 3.7 branch.

Props xknown, zieladam, peterwilsoncc, whyisjake, desrosj, dd32.

Built from https://develop.svn.wordpress.org/branches/3.7@49409


git-svn-id: http://core.svn.wordpress.org/branches/3.7@49168 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2020-10-29 19:18:10 +00:00
Sergey Biryukov 9d7aaaaad1 Administration: Pass the result of `set-screen-option` filter to the new `set_screen_option_{$option}` filter to ensure backward compatibility. 
Rename the `$keep` parameter of both filters to `$screen_option` for clarity, update the documentation to better reflect its purpose.

Follow-up to [47951].

Props Chouby, sswells, SergeyBiryukov.
Merges [48241] to the 3.7 branch.
Fixes #50392.
Built from https://develop.svn.wordpress.org/branches/3.7@48261


git-svn-id: http://core.svn.wordpress.org/branches/3.7@48030 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2020-07-01 09:55:20 +00:00
desrosj 84bcdaf9de WordPress 3.7.34 
Built from https://develop.svn.wordpress.org/branches/3.7@48006


git-svn-id: http://core.svn.wordpress.org/branches/3.7@47774 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2020-06-10 21:40:45 +00:00
Sergey Biryukov cdd8c9c40e Themes: Ensure a broken theme name is returned properly. 
Follow-up to [47962] for the 3.7 branch.
Built from https://develop.svn.wordpress.org/branches/3.7@47976


git-svn-id: http://core.svn.wordpress.org/branches/3.7@47745 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2020-06-10 18:55:46 +00:00
whyisjake 8533fe0873 General: Backport several commits for release. 
Embeds: Ensure that the title attribute is set correctly on embeds.
    Editor: Prevent HTML decoding on by setting the proper editor context.
    Formatting: Ensure that wp_validate_redirect() sanitizes a wider variety of characters.
    Themes: Ensure a broken theme name is returned properly.
    Administration: Add a new filter to extend set-screen-option. 
Merges [47947-47951] to the 3.7 branch.
Props xknown, sstoqnov, vortfu, SergeyBiryukov, whyisjake.

Built from https://develop.svn.wordpress.org/branches/3.7@47962


git-svn-id: http://core.svn.wordpress.org/branches/3.7@47733 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2020-06-10 18:16:18 +00:00
desrosj 3b9adfa744 Updating the about page for WordPress 3.7.33 
Built from https://develop.svn.wordpress.org/branches/3.7@47685


git-svn-id: http://core.svn.wordpress.org/branches/3.7@47462 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2020-04-29 18:11:08 +00:00
Sergey Biryukov f27b277f7a Build/Test Tools: Fix the Travis CI build for the 3.7 branch. 
Among other fixes, this backports [26087], [26091], [26095], [26252], [26307], [26318], [26512], [26705], [26871], [26909-26910], [26940], [27086], [27168], [28799], [28873], [28943], [28961], [28964], [28966-28967], [29120], [29251], [29503], [29860], [29869], [29954], [30001], [30282], [30285], [30289-30291], [30513-30514], [30516-30521], [30524], [30526], [30529-30530], [31253-31254], [31257-31259], [31622], [40241], [40255], [40257], [40259], [40269], [40271], [40446], [40449], [40457], [40604], [40538], [40833], [41082], [41303], [41306], [44993].

See #49485.
Built from https://develop.svn.wordpress.org/branches/3.7@47343


git-svn-id: http://core.svn.wordpress.org/branches/3.7@47130 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2020-02-22 12:06:09 +00:00
Sergey Biryukov 803b9ff032 Posts, Post Types: Ensure `edit_post()` promotes an auto-draft to draft. 
This fixes a regression in 3.7 branch introduced in [44076].

Follow-up to [28073].

Merges [47334] to the 3.7 branch.
See #49485.
Built from https://develop.svn.wordpress.org/branches/3.7@47335


git-svn-id: http://core.svn.wordpress.org/branches/3.7@47125 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2020-02-20 22:11:08 +00:00
Sergey Biryukov c676ebc1f6 WordPress 3.7.32 
Built from https://develop.svn.wordpress.org/branches/3.7@46936


git-svn-id: http://core.svn.wordpress.org/branches/3.7@46736 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2019-12-12 20:36:08 +00:00
desrosj 11bef9c529 WordPress 3.7.31. 
Built from https://develop.svn.wordpress.org/branches/3.7@46523


git-svn-id: http://core.svn.wordpress.org/branches/3.7@46320 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2019-10-14 20:21:07 +00:00
desrosj c8b76218dd WordPress 3.7.30. 
Built from https://develop.svn.wordpress.org/branches/3.7@46031


git-svn-id: http://core.svn.wordpress.org/branches/3.7@45843 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2019-09-04 21:51:40 +00:00
Sergey Biryukov d4b0390117 Escape the output in `wp_ajax_upload_attachment()`. 
Merges [45936] to the 3.7 branch.
Props whyisjake, sstoqnov.
Built from https://develop.svn.wordpress.org/branches/3.7@45970


git-svn-id: http://core.svn.wordpress.org/branches/3.7@45781 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2019-09-04 16:50:08 +00:00
Gary Pendergast c03ffe42a1 WordPress 3.7.29 
Built from https://develop.svn.wordpress.org/branches/3.7@44892


git-svn-id: http://core.svn.wordpress.org/branches/3.7@44723 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2019-03-13 03:14:08 +00:00
Sergey Biryukov d2398ee562 Comments: Improve comment content filtering. 
Merges [44842] to the 3.7 branch.
Built from https://develop.svn.wordpress.org/branches/3.7@44857


git-svn-id: http://core.svn.wordpress.org/branches/3.7@44689 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2019-03-12 22:52:08 +00:00
Jeremy Felt 093a17d3c8 Bump 3.7 branch to version 3.7.28 
Built from https://develop.svn.wordpress.org/branches/3.7@44090


git-svn-id: http://core.svn.wordpress.org/branches/3.7@43920 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2018-12-13 02:17:18 +00:00
Gary Pendergast e51c9b1ce2 Editor: Remove unwanted fields before saving posts. 
The `meta_input`, `file`, and `guid` fields are not intended to be updated through user input.

Merges [44047] to the 3.7 branch.


Built from https://develop.svn.wordpress.org/branches/3.7@44076


git-svn-id: http://core.svn.wordpress.org/branches/3.7@43906 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2018-12-13 02:05:08 +00:00
Peter Wilson e06de9c2e5 Multisite: Validate activation links. 
Merges [44048] to the 3.7 branch.

Built from https://develop.svn.wordpress.org/branches/3.7@44075


git-svn-id: http://core.svn.wordpress.org/branches/3.7@43905 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2018-12-13 02:03:08 +00:00
Aaron Campbell 216ea4f2d0 Bump 3.7 branch to version 3.7.27 
Built from https://develop.svn.wordpress.org/branches/3.7@43419


git-svn-id: http://core.svn.wordpress.org/branches/3.7@43247 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2018-07-05 16:14:30 +00:00
Aaron Campbell 71f5f5fe6a Bump 3.7 branch to version 3.7.26 
Built from https://develop.svn.wordpress.org/branches/3.7@42945


git-svn-id: http://core.svn.wordpress.org/branches/3.7@42775 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2018-04-03 20:32:43 +00:00
Dion Hulse ae9bfeddd3 Bump the 3.7 branch to 3.7.25. 
Built from https://develop.svn.wordpress.org/branches/3.7@42506


git-svn-id: http://core.svn.wordpress.org/branches/3.7@42335 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2018-01-16 21:47:35 +00:00
Dion Hulse b572e86a4a External Libraries: Remove unnecessary / obsoleted MediaElement.js files. 
Merges [42478] to the 3.7 branch.
Fixes #42720 for 3.7.

Built from https://develop.svn.wordpress.org/branches/3.7@42489


git-svn-id: http://core.svn.wordpress.org/branches/3.7@42318 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2018-01-16 08:16:11 +00:00
Dion Hulse f1b5da36be Upgrade: When deleting old files, if deletion fails attempt to empty the file instead. 
Props joemcgill, dd32.
Merges [42434] to the 3.7 branch.
Fixes #42963 for 3.7.

Built from https://develop.svn.wordpress.org/branches/3.7@42477


git-svn-id: http://core.svn.wordpress.org/branches/3.7@42306 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2018-01-16 06:59:35 +00:00
John Blackbourn 8698e8339a Bump 3.7 branch to version 3.7.24. 
Built from https://develop.svn.wordpress.org/branches/3.7@42328


git-svn-id: http://core.svn.wordpress.org/branches/3.7@42157 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-11-29 19:06:09 +00:00
John Blackbourn 82f8529ad5 Hardening: Use a properly generated hash for the `newbloguser` key instead of a determinate substring. 
Merges [42258] to the 3.7 branch.

Built from https://develop.svn.wordpress.org/branches/3.7@42312


git-svn-id: http://core.svn.wordpress.org/branches/3.7@42141 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-11-29 16:49:10 +00:00
Gary Pendergast 2fd667487f Bump 3.7 branch to version 3.7.23. 
Built from https://develop.svn.wordpress.org/branches/3.7@42080


git-svn-id: http://core.svn.wordpress.org/branches/3.7@41909 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-10-31 13:47:10 +00:00
Dominik Schilling 99d97c76b0 Users: Use correct escaping function for URLs. 
Merge of [41522] to the 3.7 branch.

Built from https://develop.svn.wordpress.org/branches/3.7@41534


git-svn-id: http://core.svn.wordpress.org/branches/3.7@41367 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-09-19 21:40:34 +00:00
Aaron Campbell 67bf4cd7e1 Bump 3.7 branch to version 3.7.22. 
Built from https://develop.svn.wordpress.org/branches/3.7@41521


git-svn-id: http://core.svn.wordpress.org/branches/3.7@41354 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-09-19 20:14:20 +00:00
John Blackbourn 1d5a7892f2 Filesystem API: Ensure filenames are valid before attempting to unzip them to ensure malformed file paths don't cause issues. 
Merges [41457] to the 3.7 branch.

Built from https://develop.svn.wordpress.org/branches/3.7@41469


git-svn-id: http://core.svn.wordpress.org/branches/3.7@41302 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-09-19 14:47:09 +00:00
John Blackbourn 8d241beedb General: Add missing URL-encoding and add extra hardening to plugin and template names when they're displayed in the admin area. 
Merges [41434] with changes to the 3.7 branch.

See #13377

Built from https://develop.svn.wordpress.org/branches/3.7@41456


git-svn-id: http://core.svn.wordpress.org/branches/3.7@41289 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-09-19 13:52:09 +00:00
Dominik Schilling 774f81b780 Users: Provide a fallback for incorrect HTTP referrers. 
Merge of [41398] to the 3.7 branch.

Built from https://develop.svn.wordpress.org/branches/3.7@41428


git-svn-id: http://core.svn.wordpress.org/branches/3.7@41261 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-09-19 11:15:50 +00:00
Aaron Campbell fe080e84db Bump 3.7 branch to version 3.7.21. 
Built from https://develop.svn.wordpress.org/branches/3.7@40758


git-svn-id: http://core.svn.wordpress.org/branches/3.7@40616 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-05-16 21:54:15 +00:00
Aaron Campbell f5fca82e63 Add nonce for updating file system credentials. 
Merges [40723] to 3.7 branch.

Built from https://develop.svn.wordpress.org/branches/3.7@40734


git-svn-id: http://core.svn.wordpress.org/branches/3.7@40592 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-05-16 14:58:09 +00:00
Dominik Schilling 303264210a Customize: Ignore invalid customization sessions. 
Merge of [40704] to the 3.7 branch.
Built from https://develop.svn.wordpress.org/branches/3.7@40715


git-svn-id: http://core.svn.wordpress.org/branches/3.7@40578 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-05-16 12:23:10 +00:00
Pascal Birchler a2797f26d2 Bump 3.7 branch to version 3.7.20. 
Built from https://develop.svn.wordpress.org/branches/3.7@40497


git-svn-id: http://core.svn.wordpress.org/branches/3.7@40373 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-04-20 16:30:10 +00:00
Pascal Birchler 63b4b6a006 Fix broken audio/video functions when sanitizing ID3 data 
This fixes a bug where running `wp_kses_post_deep()` on all the ID3
tag data corrupted blob data.

See #40075, #40085.

Merges [40400] to the 3.7 branch.

Built from https://develop.svn.wordpress.org/branches/3.7@40470


git-svn-id: http://core.svn.wordpress.org/branches/3.7@40346 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-04-17 13:48:09 +00:00
James Nylen 85e61d7921 Bump 3.7 branch to version 3.7.19. 
Built from https://develop.svn.wordpress.org/branches/3.7@40212


git-svn-id: http://core.svn.wordpress.org/branches/3.7@40151 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-03-06 16:50:09 +00:00
Aaron Campbell c6ab9f325b Plugins: Add file check to plugin deletions. 
Merges [40169] to 3.7 branch.


Built from https://develop.svn.wordpress.org/branches/3.7@40180


git-svn-id: http://core.svn.wordpress.org/branches/3.7@40119 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-03-06 13:06:09 +00:00