Commit Graph

13569 Commits

Author SHA1 Message Date
Dion Hulse 0ef34e30c2 Bump the 4.1 branch to 4.1.22.
Built from https://develop.svn.wordpress.org/branches/4.1@42502


git-svn-id: http://core.svn.wordpress.org/branches/4.1@42331 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2018-01-16 21:45:56 +00:00
Dion Hulse 7683fc66cb External Libraries: Remove unnecessary / obsoleted MediaElement.js files.
Merges [42478] to the 4.1 branch.
Fixes #42720 for 4.1.

Built from https://develop.svn.wordpress.org/branches/4.1@42485


git-svn-id: http://core.svn.wordpress.org/branches/4.1@42314 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2018-01-16 08:13:27 +00:00
Dion Hulse 179e2944b9 Upgrade: When deleting old files, if deletion fails attempt to empty the file instead.
Props joemcgill, dd32.
Merges [42434] to the 4.1 branch.
Fixes #42963 for 4.1.

Built from https://develop.svn.wordpress.org/branches/4.1@42473


git-svn-id: http://core.svn.wordpress.org/branches/4.1@42302 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2018-01-16 06:58:21 +00:00
John Blackbourn f3529cb89d Bump 4.1 branch to version 4.1.21.
Built from https://develop.svn.wordpress.org/branches/4.1@42324


git-svn-id: http://core.svn.wordpress.org/branches/4.1@42153 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-11-29 19:02:55 +00:00
John Blackbourn 3d3b4558d6 Hardening: Use a properly generated hash for the `newbloguser` key instead of a determinate substring.
Merges [42258] to the 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@42296


git-svn-id: http://core.svn.wordpress.org/branches/4.1@42125 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-11-29 16:36:28 +00:00
Gary Pendergast 1466683d48 Bump 4.1 branch to version 4.1.20.
Built from https://develop.svn.wordpress.org/branches/4.1@42076


git-svn-id: http://core.svn.wordpress.org/branches/4.1@41905 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-10-31 13:43:26 +00:00
Dominik Schilling b2a9df1c79 Users: Use correct escaping function for URLs.
Merge of [41522] to the 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@41530


git-svn-id: http://core.svn.wordpress.org/branches/4.1@41363 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-09-19 21:39:26 +00:00
Aaron Campbell 6b3afa9678 Bump 4.1 branch to version 4.1.19.
Built from https://develop.svn.wordpress.org/branches/4.1@41517


git-svn-id: http://core.svn.wordpress.org/branches/4.1@41350 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-09-19 20:07:25 +00:00
John Blackbourn 6c7de13e11 Filesystem API: Ensure filenames are valid before attempting to unzip them to ensure malformed file paths don't cause issues.
Merges [41457] to the 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@41465


git-svn-id: http://core.svn.wordpress.org/branches/4.1@41298 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-09-19 14:44:20 +00:00
John Blackbourn dc11b33974 General: Add missing URL-encoding and add extra hardening to plugin and template names when they're displayed in the admin area.
Merges [41434] with changes to the 4.1 branch.

See #13377

Built from https://develop.svn.wordpress.org/branches/4.1@41446


git-svn-id: http://core.svn.wordpress.org/branches/4.1@41279 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-09-19 13:39:24 +00:00
Dominik Schilling 8c8a907ba3 Users: Provide a fallback for incorrect HTTP referrers.
Merge of [41398] to the 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@41424


git-svn-id: http://core.svn.wordpress.org/branches/4.1@41257 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-09-19 11:14:59 +00:00
Aaron Campbell 9eb95c11ff Bump 4.1 branch to version 4.1.18.
Built from https://develop.svn.wordpress.org/branches/4.1@40754


git-svn-id: http://core.svn.wordpress.org/branches/4.1@40612 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-05-16 21:53:24 +00:00
Aaron Campbell 1a65464490 Add nonce for updating file system credentials.
Merges [40723] to 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@40730


git-svn-id: http://core.svn.wordpress.org/branches/4.1@40588 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-05-16 14:56:48 +00:00
Dominik Schilling f1dd14eb48 Customize: Ignore invalid customization sessions.
Merge of [40704] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@40711


git-svn-id: http://core.svn.wordpress.org/branches/4.1@40574 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-05-16 12:20:25 +00:00
Pascal Birchler d4a45dc58d Bump 4.1 branch to version 4.1.17.
Built from https://develop.svn.wordpress.org/branches/4.1@40493


git-svn-id: http://core.svn.wordpress.org/branches/4.1@40369 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-04-20 16:27:26 +00:00
Pascal Birchler d0682377ef Fix broken audio/video functions when sanitizing ID3 data
This fixes a bug where running `wp_kses_post_deep()` on all the ID3
tag data corrupted blob data.

See #40075, #40085.

Merges [40400] to the 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@40466


git-svn-id: http://core.svn.wordpress.org/branches/4.1@40342 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-04-17 13:29:25 +00:00
James Nylen d19df5f1e4 Bump 4.1 branch to version 4.1.16.
Built from https://develop.svn.wordpress.org/branches/4.1@40208


git-svn-id: http://core.svn.wordpress.org/branches/4.1@40147 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-03-06 16:35:25 +00:00
Aaron Campbell a0922a8e99 Plugins: Add file check to plugin deletions.
Merges [40169] to 4.1 branch.


Built from https://develop.svn.wordpress.org/branches/4.1@40176


git-svn-id: http://core.svn.wordpress.org/branches/4.1@40115 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-03-06 13:03:54 +00:00
Jeremy Felt 2702705876 Validate video and audio metadata.
Merge of [40148] to the 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@40155


git-svn-id: http://core.svn.wordpress.org/branches/4.1@40094 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-03-06 08:10:27 +00:00
Aaron Campbell c0abe8d804 Bump 4.1 branch to version 4.1.15.
Built from https://develop.svn.wordpress.org/branches/4.1@40002


git-svn-id: http://core.svn.wordpress.org/branches/4.1@39939 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-26 18:26:25 +00:00
John Blackbourn 64094ebb31 Posts, Post Types: When using Excerpt mode on the Posts list table, ensure the excerpt output matches what was manually entered into the Excerpt field.
Merges [39956] to the 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@39985


git-svn-id: http://core.svn.wordpress.org/branches/4.1@39922 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-26 14:18:24 +00:00
Dominik Schilling 474af50d38 Press This: Do not show Categories & Tags UI for users who cannot assign terms to posts anyways.
Merge of [39968] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@39976


git-svn-id: http://core.svn.wordpress.org/branches/4.1@39913 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-26 14:13:55 +00:00
Aaron Campbell edd582c69e Bump 4.1 branch to version 4.1.14.
Built from https://develop.svn.wordpress.org/branches/4.1@39866


git-svn-id: http://core.svn.wordpress.org/branches/4.1@39803 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-11 16:58:53 +00:00
Dominik Schilling 4167b5b2cf Updates: Translate plugin data on the Updates screen.
Merge of [39808] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@39826


git-svn-id: http://core.svn.wordpress.org/branches/4.1@39764 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-11 11:42:50 +00:00
Aaron Campbell be45faec74 Add nonce for widget accessibility mode.
Props vortfu.

See #23328.

Merges [39765] to 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@39767


git-svn-id: http://core.svn.wordpress.org/branches/4.1@39705 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-11 01:50:26 +00:00
Joe McGill 9ee6a9ad66 Media: Improved media titles when created from filename.
Preserves spaces and generally creates more accurate, cleaner titles from filenames of uploaded media.

Merge of [38615] to the 4.1 branch.

Fixes #37989.

Built from https://develop.svn.wordpress.org/branches/4.1@39715


git-svn-id: http://core.svn.wordpress.org/branches/4.1@39655 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-06 22:01:26 +00:00
Jeremy Felt 9a9ecd5c32 Bump 4.1 branch to 4.1.13.
Built from https://develop.svn.wordpress.org/branches/4.1@38554


git-svn-id: http://core.svn.wordpress.org/branches/4.1@38497 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-09-07 15:00:58 +00:00
Jeremy Felt 98ead2d8bb Media: Sanitize upload filename.
Merge of [38538] to the 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@38544


git-svn-id: http://core.svn.wordpress.org/branches/4.1@38487 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-09-07 13:59:54 +00:00
Pascal Birchler 0be5d63999 Upgrade/Install: Sanitize file name in `File_Upload_Upgrader`.
Merge of [38524] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@38530


git-svn-id: http://core.svn.wordpress.org/branches/4.1@38471 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-09-06 17:57:23 +00:00
Boone Gorges 3d28255a66 Bump 4.1 branch to 4.1.12.
Built from https://develop.svn.wordpress.org/branches/4.1@37832


git-svn-id: http://core.svn.wordpress.org/branches/4.1@37797 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 16:39:24 +00:00
Nikolay Bachiyski 7fcd5f5219 Admin: escape URL-encoded permalinks
Merge of [37801] to the 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@37815


git-svn-id: http://core.svn.wordpress.org/branches/4.1@37780 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 14:56:22 +00:00
Rachel Baker 7e883711c3 Revisions: Change the capability needed to view revision diffs to `edit_post`.
Merge of [37779] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@37800


git-svn-id: http://core.svn.wordpress.org/branches/4.1@37765 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 14:46:22 +00:00
Boone Gorges 79e7b2e6aa Taxonomy: More specific cap check when processing category data on post save.
Ports [37691] to the 4.1 branch.

Props dlh.
Fixes #36379.
Built from https://develop.svn.wordpress.org/branches/4.1@37781


git-svn-id: http://core.svn.wordpress.org/branches/4.1@37746 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 14:22:56 +00:00
Dominik Schilling 65b88f9802 Customize: Make sure that preview and return URLs are URLs.
Merge of [37527] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@37773


git-svn-id: http://core.svn.wordpress.org/branches/4.1@37738 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 14:20:25 +00:00
Dominik Schilling 2dbd645312 Bump 4.1 branch to 4.1.11.
Built from https://develop.svn.wordpress.org/branches/4.1@37388


git-svn-id: http://core.svn.wordpress.org/branches/4.1@37354 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-05-06 18:14:22 +00:00
Jeremy Felt 92c3f699a9 Multisite: Improve escaping in network settings.
Merge of [37124] to the 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@37128


git-svn-id: http://core.svn.wordpress.org/branches/4.1@37095 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-03-30 16:05:21 +00:00
Dominik Schilling cd0d7d699d Multisite: Validate new email address confirmations.
Merge of [37103] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@37107


git-svn-id: http://core.svn.wordpress.org/branches/4.1@37074 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-03-30 14:50:48 +00:00
Dominik Schilling 7df345b1cc Bump 4.1 branch to 4.1.10.
Built from https://develop.svn.wordpress.org/branches/4.1@36458


git-svn-id: http://core.svn.wordpress.org/branches/4.1@36425 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-02-02 17:29:22 +00:00
Dominik Schilling 197d5128b2 Bump 4.1 branch to 4.1.9.
Built from https://develop.svn.wordpress.org/branches/4.1@36199


git-svn-id: http://core.svn.wordpress.org/branches/4.1@36166 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-01-06 18:50:23 +00:00
Helen Hou-Sandí a4add78415 Bump 4.1 branch to 4.1.8.
Built from https://develop.svn.wordpress.org/branches/4.1@34183


git-svn-id: http://core.svn.wordpress.org/branches/4.1@34151 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-09-15 14:28:10 +00:00
Dominik Schilling d38d60223d XMLRPC: Don't allow private posts to be sticky.
Merge of [33325], [33612], and [34135] to the 4.1 branch.

See #20662.
Built from https://develop.svn.wordpress.org/branches/4.1@34153


git-svn-id: http://core.svn.wordpress.org/branches/4.1@34121 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-09-14 23:01:22 +00:00
Nikolay Bachiyski 0da231a2d9 List tables: escape user e-mails
Merges [34133] for 4.1 branch

Built from https://develop.svn.wordpress.org/branches/4.1@34139


git-svn-id: http://core.svn.wordpress.org/branches/4.1@34107 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-09-14 22:42:23 +00:00
Dominik Schilling 9460b427a2 Bump 4.1 branch to version 4.1.7.
Built from https://develop.svn.wordpress.org/branches/4.1@33574


git-svn-id: http://core.svn.wordpress.org/branches/4.1@33541 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-08-04 11:51:21 +00:00
Dominik Schilling f5171862ba Heartbeat: Ensure post locks are released.
Merge of [33542] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@33544


git-svn-id: http://core.svn.wordpress.org/branches/4.1@33511 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-08-04 04:55:19 +00:00
Gary Pendergast fae5374051 Bump 4.1 branch to version 4.1.6.
Built from https://develop.svn.wordpress.org/branches/4.1@33396


git-svn-id: http://core.svn.wordpress.org/branches/4.1@33364 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-07-23 11:05:21 +00:00
Gary Pendergast a9e97c7ad5 Capabilities: When creating an auto-draft, ensure that the current user still has permission to do so.
Merge of [33357] to the 4.1 branch.


Built from https://develop.svn.wordpress.org/branches/4.1@33375


git-svn-id: http://core.svn.wordpress.org/branches/4.1@33346 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-07-23 03:54:21 +00:00
Michael Adams 3989e1f450 Upgrade: `$wpdb->get_col_length()` sanity check: bail on unexpected return value.
Merges [32429] for the 4.1 branch.

See #32165.

Built from https://develop.svn.wordpress.org/branches/4.1@32431


git-svn-id: http://core.svn.wordpress.org/branches/4.1@32401 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-05-06 23:13:22 +00:00
Dominik Schilling 3e3300395a Add closing paragraph tag for the 4.1.5 changelog entry.
Built from https://develop.svn.wordpress.org/branches/4.1@32428


git-svn-id: http://core.svn.wordpress.org/branches/4.1@32398 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-05-06 23:04:23 +00:00
Dominik Schilling 3aa108639d 4.1.5 version bumps.
Built from https://develop.svn.wordpress.org/branches/4.1@32425


git-svn-id: http://core.svn.wordpress.org/branches/4.1@32395 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-05-06 22:18:23 +00:00
Michael Adams 2b8283ed89 Upgrade: Ensure unintelligible DB schemas don't result in content loss.
Merge of [32417] to the 4.1 branch.

See #32165.

Props ocean90.

Built from https://develop.svn.wordpress.org/branches/4.1@32419


git-svn-id: http://core.svn.wordpress.org/branches/4.1@32389 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-05-06 21:51:24 +00:00