Commit Graph

5280 Commits

Author SHA1 Message Date
westi 135927695a Menu hardening for the 2.8 branch see #11922
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@12893 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-01-28 22:07:51 +00:00
ryan b39733120a Some hardening for 2.8
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@12539 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-12-24 16:08:15 +00:00
ryan 9824ba235f escape hrefs. Props Denis-de-Bernardy. fixes #10056 for 2.8
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@12296 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-11-30 17:08:36 +00:00
markjaquith 15c978cd09 Prevent XSS in press-this.php. props Benjamin Flesch. fixes #11119 for 2.8.x
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@12170 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-11-12 02:50:13 +00:00
westi aeaafa32d2 Backport of the switch of the post|page being editing message from a create_function call to a normal function and reduce the duplicated code. See #10729 for 2.8 branch.
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@12068 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-10-20 17:00:34 +00:00
ryan 14b9111b10 Remove trailing whitespace after closing tag
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11970 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-09-24 17:16:34 +00:00
ryan 23057f7de3 Add btt.php and jkw.php to list of files to remove during upgrade.
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11919 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-09-11 18:12:47 +00:00
ryan 7aaba86070 Retire Jerome's keywords importer
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11916 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-09-11 17:55:18 +00:00
ryan ad7b4aa88d Retire BunnyTags importer
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11915 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-09-11 17:53:39 +00:00
ryan 22f40058e5 Don't import _wp_attachment_metadata. It is regenerated when the attachment is imported.
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11889 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-08-28 00:21:42 +00:00
azaozz 193aca2e76 Fix notice in wp-admin/includes/post.php, props harrym, fixes #10678 for 2.8
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11872 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-08-24 19:40:56 +00:00
westi 3958df020f Restore the default behaviour on install of blogs appearing in search engines. Fixes #10621 for 2.8 branch.
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11833 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-08-16 09:08:12 +00:00
azaozz 9775268b25 Stop direct loading of files in wp-admin that should only be included, for 2.8
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11769 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-08-03 00:07:41 +00:00
ryan b3458cc79c Add some CYA cap checks.
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11766 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-08-02 23:11:54 +00:00
azaozz 57dad41e07 More cap checks, for 2.8
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11765 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-08-02 02:24:43 +00:00
ryan 82fbf6950d Add some CYA cap checks.
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11762 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-08-01 21:15:59 +00:00
azaozz 0bdae51fe5 Fix invalid border-radius css, props Simek, fixes #10500 for 2.8
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11753 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-07-30 16:30:18 +00:00
azaozz 9681a5253d Fix comment author url when editing, fixes #10466 for 2.8
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11740 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-07-22 22:33:11 +00:00
ryan 6fef2be21e esc_attr() for comment author email
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11728 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-07-20 02:54:20 +00:00
azaozz 3d3957f592 Properly escape comment_author_url when displaying, for 2.8
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11720 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-07-18 23:21:00 +00:00
ryan 617b650b27 Don't allow direct loading of link-parse-opml.php. This file needs to go away someday.
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11683 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-07-02 03:15:33 +00:00
azaozz d3dd8860e6 Fix the rounded corners on .widefat, for 2.8
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11675 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-07-01 07:32:43 +00:00
ryan c23720b30f Disable codepress for 2.8.1
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11673 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-06-29 21:25:53 +00:00
ryan 796f7392b6 Check that token_get_all() exists before creating documentation links. fixes #10261 for 2.8.1
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11672 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-06-29 20:48:44 +00:00
ryan a4373b7ef2 Change update string to indicate if version is the original English one, or the local one. Props nbachiyski. fixes #10117 for 2.8.1
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11670 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-06-29 20:26:16 +00:00
ryan a5902a590b Proper permissions for newly created files. Props azaozz. fixes #10170 for 2.8.1
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11668 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-06-29 20:24:04 +00:00
ryan 8a039537be RTL admin fixes. Props sambauers, nbachiyski. fixes #10159 for 2.8.1
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11666 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-06-29 00:40:43 +00:00
azaozz 53ff53bc24 Fix vertical misalignment and cell borders in IE, props demetris, fixes #10090 for 2.8
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11663 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-06-28 03:38:51 +00:00
azaozz 12158471b1 Fix pending comments count, paging and comments requests while moderating for 2.8
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11659 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-06-27 22:39:09 +00:00
azaozz 385af418f4 Use CSS instead of nbsp, props demetris, fixes #10206 for 2.8
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11648 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-06-26 12:52:08 +00:00
azaozz 51b70185ba Fix overlap in plugin and theme editors, props eddieringle, fixes #10101 for 2.8
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11646 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-06-26 11:05:04 +00:00
ryan 85c711e5e7 Don't show error message when updating a custom field without changing its value. see #10254 for 2.8.1
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11645 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-06-26 06:20:27 +00:00
ryan e27995486a Don't lose upload error messages. Props filosofo. fixes #10238 for 2.8.1
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11639 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-06-25 06:09:41 +00:00
azaozz 6ee80c9cce Fix the test for autosave in post.js, fixes #10135 for 2.8
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11636 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-06-25 06:02:05 +00:00
ryan 535aafc0e7 Enforce stream_get_contents() requirement for ssh2 fs. Props dd32. fixes #10093 for 2.8.1
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11633 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-06-23 21:55:22 +00:00
ryan ff09d34fb6 Fix back-compat plugins page redirects. Props filosofo. fixes #10246 for 2.8.1
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11629 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-06-23 17:23:40 +00:00
westi 070e860de1 Remove the cruft. Fixes #10227 for 2.8.1 props sirzooro.
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11620 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-06-20 18:51:53 +00:00
westi cce06454da Introduce _deep_replace() and use it to improve the stripping of percent encoded values from urls. Fixes #10226 for 2.8.1
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11616 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-06-20 17:49:50 +00:00
azaozz 97d0148bdf Always load the Dashboard RSS widgets with AJAX, see #10133 for 2.8
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11614 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-06-20 10:32:09 +00:00
markjaquith fc904b8997 Create wp_validate_redirect(), have the upgrade done link use it. props Westi. fixes #10193 for 2.8.1
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11611 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-06-19 19:31:17 +00:00
westi d79197327d Make it easier for plugins to add extra fields to the Edit Category/Tag forms. Fixes #8831 for 2.8.1 props Denis-de-Bernardy
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11609 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-06-19 18:58:39 +00:00
ryan bc8a828561 Enforce incoming links item limit
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11605 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-06-19 06:09:24 +00:00
ryan 6f6f9972b4 Optimize timezone dropdown creation. Props sambauers. fixes #10125 for 2.8.1
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11598 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-06-18 17:40:57 +00:00
ryan c3fd5515b9 Require all plugin page requests (?page=) to be for registered plugins pages. Provides CYA for plugins that don't do enough cap checking. action requests not bound to a plugin page still go through.
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11596 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-06-18 00:33:51 +00:00
ryan b789427f14 More menu fixes
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11593 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-06-17 19:51:09 +00:00
azaozz f54ca4c88c Fall back to wp-tinymce.js if wp-tinymce.js.gz doesn't exist
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11590 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-06-17 01:08:05 +00:00
ryan f091b2d209 Increase download_url() timeout from 30 to 60. see #10104 for 2.8.1
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11588 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-06-16 19:39:59 +00:00
ryan c37e9730d7 Plugin install fixes. Props Denis-de-Bernardy. see #10192 for 2.8.1
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11586 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-06-16 19:37:11 +00:00
ryan 8a0e96d142 Trim query strings from menu entries before seeing if a corresponding file exists. fixes #10132 for 2.8.1
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11583 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-06-16 17:12:33 +00:00
ryan c2cea0e3ed Don't write to htaccess every time page is saved. Add hard/soft flush flag to flush_rules(). Make sure fopen is successful and silence errors. Props Viper007Bond. fixes #10181 for 2.8.1
git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11579 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-06-16 02:50:55 +00:00