Dominik Schilling
b38f64fe94
Taxonomy/Users: Provide a fallback for incorrect HTTP referrers.
...
Merge of [41398] to the 4.5 branch.
Built from https://develop.svn.wordpress.org/branches/4.5@41420
git-svn-id: http://core.svn.wordpress.org/branches/4.5@41253 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-09-19 11:13:13 +00:00
John Blackbourn
367007e79a
General: Remove context added in [41414] in order to avoid a string change in a point release.
...
See #13377
Built from https://develop.svn.wordpress.org/branches/4.5@41416
git-svn-id: http://core.svn.wordpress.org/branches/4.5@41249 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-09-19 10:46:31 +00:00
John Blackbourn
9d2e40d699
General: Add missing URL-encoding and add extra hardening to plugin and template names when they're displayed in the admin area.
...
Merges [41414] into the 4.5. branch
See #13377
Built from https://develop.svn.wordpress.org/branches/4.5@41415
git-svn-id: http://core.svn.wordpress.org/branches/4.5@41248 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-09-19 10:32:31 +00:00
Dominik Schilling
0d5353afbc
Editor: Prevent adding `javascript:` and `data:` URLs through the inline link dialog.
...
Merge of [41393] to the 4.5 branch.
Built from https://develop.svn.wordpress.org/branches/4.5@41403
git-svn-id: http://core.svn.wordpress.org/branches/4.5@41236 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-09-19 10:17:14 +00:00
John Blackbourn
030d6166f9
General: Backport PHP 7.1 fixes to the 4.5 branch to avoid fatal errors and warnings.
...
Props simonvik, ayeshrajans
See #41135
Built from https://develop.svn.wordpress.org/branches/4.5@41128
git-svn-id: http://core.svn.wordpress.org/branches/4.5@40968 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-07-24 22:25:32 +00:00
Konstantin Obenland
668efc78c0
Import Twenty Sixteen, default theme for 2016.
...
See #36497 .
Merges [40851] and [40852] to the 4.5 branch.
Built from https://develop.svn.wordpress.org/branches/4.5@40858
git-svn-id: http://core.svn.wordpress.org/branches/4.5@40709 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-05-31 01:29:32 +00:00
Aaron Campbell
9ab481b9e5
Bump 4.7 branch to version 4.5.9.
...
Built from https://develop.svn.wordpress.org/branches/4.5@40750
git-svn-id: http://core.svn.wordpress.org/branches/4.5@40608 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-05-16 21:50:02 +00:00
Pascal Birchler
c2adcb9aec
Media: Simplify upload error message construction.
...
Merges [40736] to the 4.5 branch.
Built from https://develop.svn.wordpress.org/branches/4.5@40739
git-svn-id: http://core.svn.wordpress.org/branches/4.5@40597 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-05-16 18:02:32 +00:00
Aaron Campbell
a6878209f8
Add nonce for updating file system credentials.
...
Merges [40723] to 4.5 branch.
Built from https://develop.svn.wordpress.org/branches/4.5@40726
git-svn-id: http://core.svn.wordpress.org/branches/4.5@40584 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-05-16 14:54:03 +00:00
Dominik Schilling
5046262be3
Customize: Ignore invalid customization sessions.
...
Merge of [40704] to the 4.5 branch.
Built from https://develop.svn.wordpress.org/branches/4.5@40707
git-svn-id: http://core.svn.wordpress.org/branches/4.5@40570 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-05-16 12:16:31 +00:00
Pascal Birchler
62983e1dd2
Adjust post meta checks
...
Merges [40692] to the 4.5 branch.
Built from https://develop.svn.wordpress.org/branches/4.5@40695
git-svn-id: http://core.svn.wordpress.org/branches/4.5@40558 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-05-16 08:50:31 +00:00
Pascal Birchler
8ce7f49c8d
Whitelist post arguments in XML-RPC
...
Merges [40677] to the 4.5 branch.
Built from https://develop.svn.wordpress.org/branches/4.5@40680
git-svn-id: http://core.svn.wordpress.org/branches/4.5@40543 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-05-16 08:20:31 +00:00
Pascal Birchler
26c585efa7
Bump 4.5 branch to version 4.5.8.
...
Built from https://develop.svn.wordpress.org/branches/4.5@40489
git-svn-id: http://core.svn.wordpress.org/branches/4.5@40365 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-04-20 16:23:33 +00:00
Pascal Birchler
4e293bfa45
Fix broken audio/video functions when sanitizing ID3 data
...
This fixes a bug where running `wp_kses_post_deep()` on all the ID3
tag data corrupted blob data.
See #40075 , #40085 .
Merges [40400] to the 4.5 branch.
Built from https://develop.svn.wordpress.org/branches/4.5@40462
git-svn-id: http://core.svn.wordpress.org/branches/4.5@40338 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-04-17 13:14:34 +00:00
James Nylen
5d48102386
Bump 4.5 branch to version 4.5.7.
...
Built from https://develop.svn.wordpress.org/branches/4.5@40204
git-svn-id: http://core.svn.wordpress.org/branches/4.5@40143 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-03-06 16:18:31 +00:00
John Blackbourn
806d303a20
Press This: Verify intent before fetching in-page resources using Press This.
...
Props vortfu
Merges [40195] to the 4.5 branch.
Built from https://develop.svn.wordpress.org/branches/4.5@40198
git-svn-id: http://core.svn.wordpress.org/branches/4.5@40137 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-03-06 13:59:30 +00:00
Aaron Campbell
a9f9235d88
Strip control characters before validating redirect.
...
Merges [40183] to 4.5 branch.
Built from https://develop.svn.wordpress.org/branches/4.5@40186
git-svn-id: http://core.svn.wordpress.org/branches/4.5@40125 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-03-06 13:42:04 +00:00
Aaron Campbell
10a2dd32cf
Plugins: Add file check to plugin deletions.
...
Merges [40169] to 4.5 branch.
Built from https://develop.svn.wordpress.org/branches/4.5@40172
git-svn-id: http://core.svn.wordpress.org/branches/4.5@40111 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-03-06 13:00:33 +00:00
Dominik Schilling
4c805032cb
Embeds: URL encode YouTube video IDs for broader compatibility.
...
Merge of [40160] to the 4.5 branch.
Built from https://develop.svn.wordpress.org/branches/4.5@40163
git-svn-id: http://core.svn.wordpress.org/branches/4.5@40102 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-03-06 12:06:05 +00:00
Jeremy Felt
d3d39735ce
Validate video and audio metadata.
...
Merge of [40148] to the 4.5 branch.
Built from https://develop.svn.wordpress.org/branches/4.5@40151
git-svn-id: http://core.svn.wordpress.org/branches/4.5@40090 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-03-06 08:05:33 +00:00
Aaron Campbell
5697303ab4
Bump 4.5 branch to version 4.5.6.
...
Built from https://develop.svn.wordpress.org/branches/4.5@39998
git-svn-id: http://core.svn.wordpress.org/branches/4.5@39935 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-26 18:21:32 +00:00
John Blackbourn
864dc6eb0d
Posts, Post Types: When using Excerpt mode on the Posts list table, ensure the excerpt output matches what was manually entered into the Excerpt field.
...
Merges [39956] to the 4.5 branch.
Built from https://develop.svn.wordpress.org/branches/4.5@39977
git-svn-id: http://core.svn.wordpress.org/branches/4.5@39914 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-26 14:14:26 +00:00
Dominik Schilling
4bc646125d
Press This: Do not show Categories & Tags UI for users who cannot assign terms to posts anyways.
...
Merge of [39968] to the 4.5 branch.
Built from https://develop.svn.wordpress.org/branches/4.5@39972
git-svn-id: http://core.svn.wordpress.org/branches/4.5@39909 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-26 14:11:03 +00:00
Dominik Schilling
aa2ad2c3dd
Query: Ensure that queries work correctly with post type names with special characters.
...
Merge of [39952] to the 4.5 branch.
Built from https://develop.svn.wordpress.org/branches/4.5@39958
git-svn-id: http://core.svn.wordpress.org/branches/4.5@39895 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-26 13:50:32 +00:00
Aaron Campbell
438fd7f3bb
Bump 4.5 branch to version 4.5.5.
...
Built from https://develop.svn.wordpress.org/branches/4.5@39862
git-svn-id: http://core.svn.wordpress.org/branches/4.5@39799 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-11 16:55:29 +00:00
Joe McGill
a1d67608bf
Media: Fix exif_imagetype check in wp_get_image_mime
...
This is a follow up to [39831].
Merges [39850] to the 4.5 branch.
Built from https://develop.svn.wordpress.org/branches/4.5@39853
git-svn-id: http://core.svn.wordpress.org/branches/4.5@39790 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-11 16:40:32 +00:00
Joe McGill
a8dcdd4fd5
Media: Improve image filetype checking.
...
This adds a new function `wp_get_image_mime()` which is used by
`wp_check_filetype_and_ext()` to validate image files using
`exif_imagetype()` if available instead of `getimagesize()`.
`getimagesize()` is less performant than `exif_imagetype()` and is
dependent on GD. If `exif_imagetype()` is not available, it falls back to
`getimagesize()` as before.
If `wp_check_filetype_and_ext()` can't validate the filetype, we now return
`false` for ext/MIME values.
Merges [39831] to the 4.5 branch.
Built from https://develop.svn.wordpress.org/branches/4.5@39834
git-svn-id: http://core.svn.wordpress.org/branches/4.5@39772 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-11 13:15:31 +00:00
Dominik Schilling
85deec68b8
Updates: Translate plugin data on the Updates screen.
...
Merge of [39808] to the 4.5 branch.
Built from https://develop.svn.wordpress.org/branches/4.5@39822
git-svn-id: http://core.svn.wordpress.org/branches/4.5@39760 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-11 11:40:38 +00:00
Dominik Schilling
c1684e38b0
Themes: Fix markup for theme name fallbacks.
...
Merge of [39807] to the 4.5 branch.
Built from https://develop.svn.wordpress.org/branches/4.5@39811
git-svn-id: http://core.svn.wordpress.org/branches/4.5@39749 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-11 11:10:05 +00:00
Jeremy Felt
13d318d196
Multisite: Use `wp_rand()` in signup key creation.
...
Merges [39795] to the 4.5 branch.
Built from https://develop.svn.wordpress.org/branches/4.5@39798
git-svn-id: http://core.svn.wordpress.org/branches/4.5@39736 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-11 05:33:32 +00:00
Dion Hulse
440b7b387f
Update PHPMailer to 5.2.22.
...
The full list of changes is available here:
https://github.com/PHPMailer/PHPMailer/compare/v5.2.21...v5.2.22
Merges [39759] to the 4.5 branch.
Fixes #37210 for 4.5.
Built from https://develop.svn.wordpress.org/branches/4.5@39786
git-svn-id: http://core.svn.wordpress.org/branches/4.5@39724 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-11 05:23:31 +00:00
Jeremy Felt
2996d445f2
Mail: Disable wp-mail.php when `mailserver_url` is mail.example.com.
...
Merges [39772] to the 4.5 branch.
Built from https://develop.svn.wordpress.org/branches/4.5@39775
git-svn-id: http://core.svn.wordpress.org/branches/4.5@39713 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-11 05:17:05 +00:00
Aaron Campbell
1bed90114d
Add nonce for widget accessibility mode.
...
Props vortfu.
See #23328 .
Merges [39760] to 4.5 branch.
Built from https://develop.svn.wordpress.org/branches/4.5@39763
git-svn-id: http://core.svn.wordpress.org/branches/4.5@39701 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-11 01:44:31 +00:00
Dion Hulse
f991d9356c
Mail: Upgrade PHPMailer to 5.2.21.
...
Merges [39645] to the 4.5 branch.
See #37210 .
Built from https://develop.svn.wordpress.org/branches/4.5@39723
git-svn-id: http://core.svn.wordpress.org/branches/4.5@39663 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-06 22:04:36 +00:00
Joe McGill
da1c938fe9
Media: Improved media titles when created from filename.
...
Preserves spaces and generally creates more accurate, cleaner titles from filenames of uploaded media.
Merge of [38615] to the 4.5 branch.
Fixes #37989 .
Built from https://develop.svn.wordpress.org/branches/4.5@39711
git-svn-id: http://core.svn.wordpress.org/branches/4.5@39651 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-06 21:59:35 +00:00
Dion Hulse
3b209fe208
General: Update copyright year to 2017 in license.txt.
...
Props Nikschavan.
Merges [39659] to the 4.5 branch.
Fixes #39433 .
Built from https://develop.svn.wordpress.org/branches/4.5@39699
git-svn-id: http://core.svn.wordpress.org/branches/4.5@39639 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-05 08:39:11 +00:00
Jeremy Felt
34ea4c35f4
Bump 4.5 branch to 4.5.4.
...
Built from https://develop.svn.wordpress.org/branches/4.5@38550
git-svn-id: http://core.svn.wordpress.org/branches/4.5@38493 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-09-07 14:58:31 +00:00
Jeremy Felt
ff1790b8e8
Media: Sanitize upload filename.
...
Merge of [38538] to the 4.5 branch.
Built from https://develop.svn.wordpress.org/branches/4.5@38540
git-svn-id: http://core.svn.wordpress.org/branches/4.5@38483 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-09-07 13:57:58 +00:00
Pascal Birchler
b7bb8822d7
Upgrade/Install: Sanitize file name in `File_Upload_Upgrader`.
...
Merge of [38524] to the 4.5 branch.
Built from https://develop.svn.wordpress.org/branches/4.5@38526
git-svn-id: http://core.svn.wordpress.org/branches/4.5@38467 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-09-06 17:34:33 +00:00
Dominik Schilling
c1e4d25350
The 4.5 branch is now 4.5.4-alpha.
...
Built from https://develop.svn.wordpress.org/branches/4.5@38000
git-svn-id: http://core.svn.wordpress.org/branches/4.5@37941 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-07-07 12:07:32 +00:00
Boone Gorges
bf6eb0bc86
Fix About changelog for 4.5.3.
...
Built from https://develop.svn.wordpress.org/branches/4.5@37828
git-svn-id: http://core.svn.wordpress.org/branches/4.5@37793 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 16:16:28 +00:00
Boone Gorges
5843d8201a
4.5.3 fixes 17 bugs, not 16.
...
Built from https://develop.svn.wordpress.org/branches/4.5@37827
git-svn-id: http://core.svn.wordpress.org/branches/4.5@37792 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 15:56:28 +00:00
Boone Gorges
b15f7577d3
Bump 4.5 branch to 4.5.3.
...
Built from https://develop.svn.wordpress.org/branches/4.5@37826
git-svn-id: http://core.svn.wordpress.org/branches/4.5@37791 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 15:53:29 +00:00
Pascal Birchler
47e67b7d33
Media: Fix rendering of incorrect toolbar in the Edit view.
...
This switches event binding in `wp.media.controller.EditImage` to use `on`
instead of `listenTo` to restore rendering of the correct toolbar when the
`toolbar:render:edit-image` event fires. The existing listeners broke
when we upgraded Backbone in [36546].
Merge of [37678] to the 4.5 branch.
Props adamsilverstein.
Fixes #36861 .
Built from https://develop.svn.wordpress.org/branches/4.5@37813
git-svn-id: http://core.svn.wordpress.org/branches/4.5@37778 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 14:55:30 +00:00
Joe McGill
b747172c20
Media: Improve handling of extensionless filenames.
...
Merge of [37756] to the 4.5 branch.
See #37111 .
Built from https://develop.svn.wordpress.org/branches/4.5@37809
git-svn-id: http://core.svn.wordpress.org/branches/4.5@37774 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 14:52:06 +00:00
Nikolay Bachiyski
df44f6cbc4
Admin: escape URL-encoded permalinks
...
Merge of [37801] to the 4.5 branch.
Built from https://develop.svn.wordpress.org/branches/4.5@37806
git-svn-id: http://core.svn.wordpress.org/branches/4.5@37771 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 14:50:03 +00:00
Pascal Birchler
63325a253e
Media: Restore keyboard navigation of the media grid.
...
This changes the binding of event listeners in the Attachments Browser
to use `on` instead of `listenTo` for the `attachment:keydown:arrow` and
`attachment:details:shift-tab` events. The existing listeners broke
when we upgraded Backbone in [36546].
Merge of [37755] to the 4.5 branch.
Props adamsilverstein.
Fixes #36900 .
Built from https://develop.svn.wordpress.org/branches/4.5@37804
git-svn-id: http://core.svn.wordpress.org/branches/4.5@37769 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 14:49:28 +00:00
Rachel Baker
01fbbebff4
Revisions: Change the capability needed to view revision diffs to `edit_post`.
...
Merge of [37779] to the 4.5 branch.
Built from https://develop.svn.wordpress.org/branches/4.5@37791
git-svn-id: http://core.svn.wordpress.org/branches/4.5@37756 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 14:27:33 +00:00
Nikolay Bachiyski
97bcc889a7
Admin: Escape attachment name in case it contains special characters
...
Merge of [37774] to the 4.5 branch.
Built from https://develop.svn.wordpress.org/branches/4.5@37783
git-svn-id: http://core.svn.wordpress.org/branches/4.5@37748 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 14:23:45 +00:00
Dominik Schilling
45dc424bc1
Customize: Make sure that preview and return URLs are URLs.
...
Merge of [37527] to the 4.5 branch.
Built from https://develop.svn.wordpress.org/branches/4.5@37768
git-svn-id: http://core.svn.wordpress.org/branches/4.5@37733 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 14:16:56 +00:00