Commit Graph

13358 Commits

Author SHA1 Message Date
audrasjb 505b7c55f5 WordPress 5.2.21.
Built from https://develop.svn.wordpress.org/branches/5.2@58516


git-svn-id: http://core.svn.wordpress.org/branches/5.2@57964 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2024-06-24 16:29:38 +00:00
Joe McGill 433521e44b WordPress 5.2.20.
Built from https://develop.svn.wordpress.org/branches/5.2@57426


git-svn-id: http://core.svn.wordpress.org/branches/5.2@56932 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2024-01-30 16:23:46 +00:00
audrasjb 60e90ad7c6 WordPress 5.2.19.
Built from https://develop.svn.wordpress.org/branches/5.2@56881


git-svn-id: http://core.svn.wordpress.org/branches/5.2@56392 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2023-10-12 18:27:43 +00:00
audrasjb 72431d4111 Grouped backports to the 5.2 branch.
- Media: Prevent CSRF setting attachment thumbnails.
- Embeds: Add protocol validation for WordPress Embed code.
- I18N: Introduce sanitization function for locale.
- Editor: Ensure block comments are of a valid form.

Merges [55760-55764] to the 5.2 branch.
Props dd32, isabel_brison, martinkrcho, matveb, ocean90, paulkevan, peterwilsoncc, timothyblynjacobs, xknown, youknowriad.


Built from https://develop.svn.wordpress.org/branches/5.2@55789


git-svn-id: http://core.svn.wordpress.org/branches/5.2@55301 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2023-05-16 16:00:52 +00:00
audrasjb ee7c7b71f5 WordPress 5.2.17.
Built from https://develop.svn.wordpress.org/branches/5.2@54591


git-svn-id: http://core.svn.wordpress.org/branches/5.2@54145 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2022-10-17 19:53:21 +00:00
desrosj a0464a56a7 WordPress 5.2.16.
Built from https://develop.svn.wordpress.org/branches/5.2@53995


git-svn-id: http://core.svn.wordpress.org/branches/5.2@53554 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2022-08-30 17:33:40 +00:00
davidbaumwald 65e7638ee8 WordPress 5.2.15.
Built from https://develop.svn.wordpress.org/branches/5.2@52875


git-svn-id: http://core.svn.wordpress.org/branches/5.2@52464 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2022-03-10 22:03:45 +00:00
desrosj e888732769 WordPress 5.2.14.
Built from https://develop.svn.wordpress.org/branches/5.2@52493


git-svn-id: http://core.svn.wordpress.org/branches/5.2@52085 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2022-01-06 18:51:31 +00:00
desrosj 0ebcbe65d6 WordPress 5.2.13.
Built from https://develop.svn.wordpress.org/branches/5.2@52119


git-svn-id: http://core.svn.wordpress.org/branches/5.2@51711 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2021-11-10 17:11:42 +00:00
desrosj 7c0a526276 WordPress 5.2.12.
Built from https://develop.svn.wordpress.org/branches/5.2@51764


git-svn-id: http://core.svn.wordpress.org/branches/5.2@51371 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2021-09-08 21:37:42 +00:00
Peter Wilson 504360c3e0 WordPress 5.2.11.
Built from https://develop.svn.wordpress.org/branches/5.2@50874


git-svn-id: http://core.svn.wordpress.org/branches/5.2@50483 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2021-05-12 23:16:42 +00:00
Peter Wilson ffd641f40a Version bump for 5.2.10.
Built from https://develop.svn.wordpress.org/branches/5.2@50741


git-svn-id: http://core.svn.wordpress.org/branches/5.2@50350 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2021-04-15 01:38:32 +00:00
Sergey Biryukov 130b6904f3 WordPress 5.2.9.
Built from https://develop.svn.wordpress.org/branches/5.2@49461


git-svn-id: http://core.svn.wordpress.org/branches/5.2@49220 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2020-10-30 19:50:57 +00:00
desrosj 8dd5c0cdec WordPress 5.2.8.
Built from https://develop.svn.wordpress.org/branches/5.2@49412


git-svn-id: http://core.svn.wordpress.org/branches/5.2@49171 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2020-10-29 19:37:05 +00:00
desrosj 8b8aef2834 WordPress 5.2.7.
Built from https://develop.svn.wordpress.org/branches/5.2@47991


git-svn-id: http://core.svn.wordpress.org/branches/5.2@47759 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2020-06-10 21:34:59 +00:00
desrosj c9886c5357 WordPress 5.2.6
Built from https://develop.svn.wordpress.org/branches/5.2@47668


git-svn-id: http://core.svn.wordpress.org/branches/5.2@47445 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2020-04-29 17:58:51 +00:00
Sergey Biryukov 7d171684bc WordPress 5.2.5
Built from https://develop.svn.wordpress.org/branches/5.2@46921


git-svn-id: http://core.svn.wordpress.org/branches/5.2@46721 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-12-12 20:24:58 +00:00
desrosj d60f90873c Post WordPress 5.2.4 version bump. The 5.2 branch is now 5.2.5-alpha.
Built from https://develop.svn.wordpress.org/branches/5.2@46540


git-svn-id: http://core.svn.wordpress.org/branches/5.2@46337 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-10-14 22:02:53 +00:00
desrosj 9380cf2995 WordPress 5.2.4.
Built from https://develop.svn.wordpress.org/branches/5.2@46508


git-svn-id: http://core.svn.wordpress.org/branches/5.2@46305 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-10-14 20:06:55 +00:00
whyisjake e9ecfd078e REST API: Send a Vary: Origin header on GET requests.
Add this header on all GET requests to prevent cached requests.

Fixes some code dulication from [46484] and backports the changes from [46484] to the 5.2 branch.
Props darthhexx, davidbinda, nickdaugherty, whyisjake.

Built from https://develop.svn.wordpress.org/branches/5.2@46487


git-svn-id: http://core.svn.wordpress.org/branches/5.2@46285 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-10-14 17:44:54 +00:00
whyisjake 0ca56956ae Administration: Ensure that admin referer nonce is valid.
Coding standards, ensure that nonce is valid with identical, rather then equal operator.

Backports [46477] to the 5.2 branch.
Props vortfu, xknown, whyisjake.

Built from https://develop.svn.wordpress.org/branches/5.2@46486


git-svn-id: http://core.svn.wordpress.org/branches/5.2@46284 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-10-14 17:34:53 +00:00
whyisjake cbc773dcbb Filesystem API: Prevent directory travelersals when creating new folders.
Reject file paths that contain sub-directory paths.

Props iandunn, xknown, sstoqnov, whyisjake.

Built from https://develop.svn.wordpress.org/branches/5.2@46484


git-svn-id: http://core.svn.wordpress.org/branches/5.2@46282 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-10-14 16:34:53 +00:00
whyisjake e5e18e9b15 Filesystem API: Prevent directory travelersals when creating new folders.
Reject file paths that contain sub-directory paths.

Backports [46476] to the 5.2 branch.

Props iandunn, xknown, sstoqnov, whyisjake.

Built from https://develop.svn.wordpress.org/branches/5.2@46482


git-svn-id: http://core.svn.wordpress.org/branches/5.2@46280 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-10-14 16:13:53 +00:00
whyisjake c4a25f9386 Add merge information missed in r46474-46475.
Built from https://develop.svn.wordpress.org/branches/5.2@46481


git-svn-id: http://core.svn.wordpress.org/branches/5.2@46279 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-10-14 16:09:51 +00:00
whyisjake f0335c6a8b HTTP API: Protect against hex interpretation.
Return earlier from wp_http_validate_url().

Props: iandunn, xknown, voldemortensen, whyisjake.

Built from https://develop.svn.wordpress.org/branches/5.2@46480


git-svn-id: http://core.svn.wordpress.org/branches/5.2@46278 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-10-14 15:52:53 +00:00
whyisjake f82ed753cf Query: Remove the static query property.
Prevent unauthenticated views of publicly queryables content types.

Props aaroncampbell, whyisjake, nickdaugherty, xknown.

Built from https://develop.svn.wordpress.org/branches/5.2@46479


git-svn-id: http://core.svn.wordpress.org/branches/5.2@46277 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-10-14 15:51:54 +00:00
Sergey Biryukov c83ea95120 Formatting: In `wp_validate_redirect()`, normalize the path when validating the location for relative URLs, to account for Windows paths.
Props peterwilsoncc, rconde, jmmathc, mat-lipe, Sixes, justinahinon, cmagrin, daxelrod, SergeyBiryukov.
Merges [46472] to the 5.2 branch.
Fixes #47980.
Built from https://develop.svn.wordpress.org/branches/5.2@46473


git-svn-id: http://core.svn.wordpress.org/branches/5.2@46271 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-10-14 11:04:55 +00:00
desrosj 5753d19fe4 Build/Test Tools: Remove PHP 7.4 and nightly builds from Travis.
See #48225.
Built from https://develop.svn.wordpress.org/branches/5.2@46406


git-svn-id: http://core.svn.wordpress.org/branches/5.2@46205 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-10-05 16:58:53 +00:00
whyisjake e4b3059eb2 Remove the extra call for wp-sanitize from the script loader.
Merges [46073] to the 5.2 branch.
Fixes #47986.


Built from https://develop.svn.wordpress.org/branches/5.2@46074


git-svn-id: http://core.svn.wordpress.org/branches/5.2@45886 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-09-06 21:56:54 +00:00
Sergey Biryukov fd1d9bb298 Post WordPress 5.2.3 version bump.
Built from https://develop.svn.wordpress.org/branches/5.2@46065


git-svn-id: http://core.svn.wordpress.org/branches/5.2@45877 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-09-05 02:16:54 +00:00
whyisjake e3194da7eb WordPress 5.2.3.
Built from https://develop.svn.wordpress.org/branches/5.2@46047


git-svn-id: http://core.svn.wordpress.org/branches/5.2@45859 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-09-04 22:09:18 +00:00
desrosj 2df5a45321 Help/About: Update the About page for 5.2.3.
Props whyisjake, desrosj.
Fixes #47923.
Built from https://develop.svn.wordpress.org/branches/5.2@46046


git-svn-id: http://core.svn.wordpress.org/branches/5.2@45858 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-09-04 22:08:25 +00:00
Sergey Biryukov cbd492abd3 Coding Standards: Fix WPCS issue in [45990].
Merges [46019] to the 5.2. branch.
Built from https://develop.svn.wordpress.org/branches/5.2@46022


git-svn-id: http://core.svn.wordpress.org/branches/5.2@45833 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-09-04 21:46:48 +00:00
desrosj a3c199b473 Fix for URL sanitization in `wp_kses_bad_protocol_once()`.
Merges [45997] to the 5.2 branch.

Props irsdl, sstoqnov, whyisjake.
Built from https://develop.svn.wordpress.org/branches/5.2@46000


git-svn-id: http://core.svn.wordpress.org/branches/5.2@45811 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-09-04 17:57:52 +00:00
Sergey Biryukov 50f2f05956 Improve handling the existing `rel` attribute in `wp_rel_nofollow_callback()`.
Merges [45990] to the 5.2 branch.
Props xknown, sstoqnov.
Built from https://develop.svn.wordpress.org/branches/5.2@45991


git-svn-id: http://core.svn.wordpress.org/branches/5.2@45802 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-09-04 17:39:51 +00:00
whyisjake affedce0a8 Update wp.a11y.speak() to sanitize HTML before display.
Merges [45979] to the 5.2 branch

Props iandunn, adamsilverstein, sstoqnov, peterwilsoncc

Built from https://develop.svn.wordpress.org/branches/5.2@45989


git-svn-id: http://core.svn.wordpress.org/branches/5.2@45800 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-09-04 17:23:52 +00:00
Sergey Biryukov 684ef4e3a7 Improve URL validation in `wp_validate_redirect()`.
Merges [45971] to the 5.2 branch.
Props vortfu, whyisjake, peterwilsoncc.
Built from https://develop.svn.wordpress.org/branches/5.2@45972


git-svn-id: http://core.svn.wordpress.org/branches/5.2@45783 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-09-04 16:58:52 +00:00
Sergey Biryukov 4315d85d65 Escape the output in `wp_ajax_upload_attachment()`.
Merges [45936] to the 5.2 branch.
Props whyisjake, sstoqnov.
Built from https://develop.svn.wordpress.org/branches/5.2@45938


git-svn-id: http://core.svn.wordpress.org/branches/5.2@45749 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-09-04 16:15:51 +00:00
whyisjake 6a63bf0361 Remove _convert_urlencoded_to_entities() from the get_the_content() callback.
Props vortfu, whyisjake, peterwilsoncc

Built from https://develop.svn.wordpress.org/branches/5.2@45937


git-svn-id: http://core.svn.wordpress.org/branches/5.2@45748 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-09-04 16:10:52 +00:00
whyisjake c4999912e7 WordPress 5.2.3 Release Candidate 1 version bump.
Built from https://develop.svn.wordpress.org/branches/5.2@45880


git-svn-id: http://core.svn.wordpress.org/branches/5.2@45691 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-08-22 17:57:52 +00:00
whyisjake 6e45fa6779 WordPress 5.2.3 Release Candidate 2
Built from https://develop.svn.wordpress.org/branches/5.2@45879


git-svn-id: http://core.svn.wordpress.org/branches/5.2@45690 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-08-22 17:48:52 +00:00
whyisjake dbfcb74609 WordPress 5.2.3 Release Candidate 1
Built from https://develop.svn.wordpress.org/branches/5.2@45878


git-svn-id: http://core.svn.wordpress.org/branches/5.2@45689 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-08-22 17:21:52 +00:00
Sergey Biryukov 6b8460ee43 Customizer: Trim whitespace from custom link URLs.
This complements a similar fix for the Menus screen in [45655].

Props donmhico, audrasjb.
Merges [45869] to the 5.2 branch.
Fixes #47888. See #47723.
Built from https://develop.svn.wordpress.org/branches/5.2@45870


git-svn-id: http://core.svn.wordpress.org/branches/5.2@45681 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-08-21 00:29:52 +00:00
Sergey Biryukov 7a64dfb557 Docs: Update `@since` tag for new JS functions and variables introduced in [45572].
Props garrett-eclipse.
Merges [45867] to the 5.2 branch.
See #47145.
Built from https://develop.svn.wordpress.org/branches/5.2@45868


git-svn-id: http://core.svn.wordpress.org/branches/5.2@45679 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-08-20 22:55:52 +00:00
Sergey Biryukov 5bb75cf4fd Accessibility: Make the Media modal an ARIA modal dialog.
For a number of years, the Media modal missed an explicit ARIA role and the required attributes for modal dialogs.

This was confusing for assistive technology users, since they may not realize they're inside a dialog, and that consequently the keyboard interactions may be different from the rest of the page. Lack of an explicit label for the dialog was confusing as well, since assistive technology users didn't have an immediate sense of what the dialog is for.

This change makes the Media modal meet the ARIA Authoring Practices recommendations, helping users better understand the purpose and interactions with the modal. Also, it makes sure to hide the rest of the page content from assistive technologies, until support for `aria-modal="true"` improves.

Additionally:
- moves the modal H1 heading to the beginning of the modal content 
- changes the modal left menu position to make visual and DOM order match 
- improves the `wp.media.view.FocusManager` documentation

Props afercia.
Merges [45572] to the 5.2 branch.
Fixes #47145.
Built from https://develop.svn.wordpress.org/branches/5.2@45866


git-svn-id: http://core.svn.wordpress.org/branches/5.2@45677 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-08-20 22:42:51 +00:00
Sergey Biryukov f6a419e564 Accessibility: Fix the `alt` attribute of the Gallery images within the Classic Editor.
Passes the images `alt` attribute value to the Gallery template used within the Classic Editor.

Props yarnboy, wpboss.
Merges [45725] to the 5.2 branch.
Fixes #47687.
Built from https://develop.svn.wordpress.org/branches/5.2@45865


git-svn-id: http://core.svn.wordpress.org/branches/5.2@45676 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-08-20 19:15:52 +00:00
Sergey Biryukov 49d9d2dc57 Twenty Seventeen: Correct height for a Button block without text.
Props ianbelanger, laurelfulford, nayana123.
Merges [45764], [45861], and [45863] to the 5.2 branch.
Fixes #47414.
Built from https://develop.svn.wordpress.org/branches/5.2@45864


git-svn-id: http://core.svn.wordpress.org/branches/5.2@45675 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-08-20 19:13:54 +00:00
Sergey Biryukov 61461dfa07 Accessibility: Fix the order of the Previous, Next, and Close buttons in the Attachment Details modal.
Making the visual and DOM order match benefits keyboard users who navigate documents sequentially and expect the focus order to be consistent with the sequential reading order.

Props afercia.
Merges [45506] to the 5.2 branch.
Fixes #47458.
Built from https://develop.svn.wordpress.org/branches/5.2@45849


git-svn-id: http://core.svn.wordpress.org/branches/5.2@45660 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-08-19 04:55:53 +00:00
Sergey Biryukov 6faaa121a8 Block Editor: Fix the link to the classic editor when incompatible meta boxen are detected.
Props tmatsuur, mukesh27.
Merges [45618] to the 5.2 branch.
Fixes #45935.
Built from https://develop.svn.wordpress.org/branches/5.2@45848


git-svn-id: http://core.svn.wordpress.org/branches/5.2@45659 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-08-19 04:53:53 +00:00
Sergey Biryukov bd7d21bc49 Twenty Seventeen: Correct the CSS selectors intended to fix hover colors for MediaElement controls.
This is a follow-up to the previous fix in [45146], which didn't work as expected.

Props ryokuhi.
Merges [45576] to the 5.2 branch.
Fixes #47543. See #40843.
Built from https://develop.svn.wordpress.org/branches/5.2@45847


git-svn-id: http://core.svn.wordpress.org/branches/5.2@45658 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-08-19 04:49:51 +00:00