WordPress-C
/
WordPress
mirror of https://github.com/WordPress/WordPress.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
34,082 Commits 50 Branches 749 Tags 982 MiB
Commit Graph

34082 Commits

Author SHA1 Message Date
Aaron Campbell 644434666e Database: Hardening for `wpdb::prepare()` 
Previously if you passed an array of values for placeholders, additional values could be passed as well. Now additional values will be ignored.

Merges [41470] to 4.5 branch.


Built from https://develop.svn.wordpress.org/branches/4.5@41474


git-svn-id: http://core.svn.wordpress.org/branches/4.5@41307 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-09-19 15:01:07 +00:00
John Blackbourn 6208a0780c Filesystem API: Ensure filenames are valid before attempting to unzip them to ensure malformed file paths don't cause issues. 
Merges [41457] to the 4.5 branch.

Built from https://develop.svn.wordpress.org/branches/4.5@41461


git-svn-id: http://core.svn.wordpress.org/branches/4.5@41294 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-09-19 14:41:31 +00:00
Aaron Campbell f1c76c5532 oEmbed: Add extra hardening around allowed HTML for improved sandboxing. 
Merges [41448] to 4.5 branch.



Built from https://develop.svn.wordpress.org/branches/4.5@41454


git-svn-id: http://core.svn.wordpress.org/branches/4.5@41287 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-09-19 13:50:32 +00:00
Dominik Schilling c3844666a2 TinyMCE: Improve the previews for shortcodes. 
Merge of [41395] to the 4.5 branch.

Built from https://develop.svn.wordpress.org/branches/4.5@41438


git-svn-id: http://core.svn.wordpress.org/branches/4.5@41271 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-09-19 12:43:08 +00:00
Dominik Schilling cda7d5bac0 Customize: Ensure valid themes in the preview. 
Merge of [41397] to the 4.5 branch.

Built from https://develop.svn.wordpress.org/branches/4.5@41432


git-svn-id: http://core.svn.wordpress.org/branches/4.5@41265 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-09-19 11:52:08 +00:00
Dominik Schilling b38f64fe94 Taxonomy/Users: Provide a fallback for incorrect HTTP referrers. 
Merge of [41398] to the 4.5 branch.

Built from https://develop.svn.wordpress.org/branches/4.5@41420


git-svn-id: http://core.svn.wordpress.org/branches/4.5@41253 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-09-19 11:13:13 +00:00
John Blackbourn 367007e79a General: Remove context added in [41414] in order to avoid a string change in a point release. 
See #13377

Built from https://develop.svn.wordpress.org/branches/4.5@41416


git-svn-id: http://core.svn.wordpress.org/branches/4.5@41249 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-09-19 10:46:31 +00:00
John Blackbourn 9d2e40d699 General: Add missing URL-encoding and add extra hardening to plugin and template names when they're displayed in the admin area. 
Merges [41414] into the 4.5. branch

See #13377

Built from https://develop.svn.wordpress.org/branches/4.5@41415


git-svn-id: http://core.svn.wordpress.org/branches/4.5@41248 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-09-19 10:32:31 +00:00
Dominik Schilling 0d5353afbc Editor: Prevent adding `javascript:` and `data:` URLs through the inline link dialog. 
Merge of [41393] to the 4.5 branch.

Built from https://develop.svn.wordpress.org/branches/4.5@41403


git-svn-id: http://core.svn.wordpress.org/branches/4.5@41236 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-09-19 10:17:14 +00:00
John Blackbourn 030d6166f9 General: Backport PHP 7.1 fixes to the 4.5 branch to avoid fatal errors and warnings. 
Props simonvik, ayeshrajans

See #41135

Built from https://develop.svn.wordpress.org/branches/4.5@41128


git-svn-id: http://core.svn.wordpress.org/branches/4.5@40968 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-07-24 22:25:32 +00:00
Konstantin Obenland 668efc78c0 Import Twenty Sixteen, default theme for 2016. 
See #36497.

Merges [40851] and [40852] to the 4.5 branch.

Built from https://develop.svn.wordpress.org/branches/4.5@40858


git-svn-id: http://core.svn.wordpress.org/branches/4.5@40709 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-05-31 01:29:32 +00:00
Aaron Campbell 9ab481b9e5 Bump 4.7 branch to version 4.5.9. 
Built from https://develop.svn.wordpress.org/branches/4.5@40750


git-svn-id: http://core.svn.wordpress.org/branches/4.5@40608 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-05-16 21:50:02 +00:00
Pascal Birchler c2adcb9aec Media: Simplify upload error message construction. 
Merges [40736] to the 4.5 branch.

Built from https://develop.svn.wordpress.org/branches/4.5@40739


git-svn-id: http://core.svn.wordpress.org/branches/4.5@40597 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-05-16 18:02:32 +00:00
Aaron Campbell a6878209f8 Add nonce for updating file system credentials. 
Merges [40723] to 4.5 branch.

Built from https://develop.svn.wordpress.org/branches/4.5@40726


git-svn-id: http://core.svn.wordpress.org/branches/4.5@40584 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-05-16 14:54:03 +00:00
Dominik Schilling 5046262be3 Customize: Ignore invalid customization sessions. 
Merge of [40704] to the 4.5 branch.
Built from https://develop.svn.wordpress.org/branches/4.5@40707


git-svn-id: http://core.svn.wordpress.org/branches/4.5@40570 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-05-16 12:16:31 +00:00
Pascal Birchler 62983e1dd2 Adjust post meta checks 
Merges [40692] to the 4.5 branch.

Built from https://develop.svn.wordpress.org/branches/4.5@40695


git-svn-id: http://core.svn.wordpress.org/branches/4.5@40558 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-05-16 08:50:31 +00:00
Pascal Birchler 8ce7f49c8d Whitelist post arguments in XML-RPC 
Merges [40677] to the 4.5 branch.

Built from https://develop.svn.wordpress.org/branches/4.5@40680


git-svn-id: http://core.svn.wordpress.org/branches/4.5@40543 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-05-16 08:20:31 +00:00
Pascal Birchler 26c585efa7 Bump 4.5 branch to version 4.5.8. 
Built from https://develop.svn.wordpress.org/branches/4.5@40489


git-svn-id: http://core.svn.wordpress.org/branches/4.5@40365 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-04-20 16:23:33 +00:00
Pascal Birchler 4e293bfa45 Fix broken audio/video functions when sanitizing ID3 data 
This fixes a bug where running `wp_kses_post_deep()` on all the ID3
tag data corrupted blob data.

See #40075, #40085.

Merges [40400] to the 4.5 branch.

Built from https://develop.svn.wordpress.org/branches/4.5@40462


git-svn-id: http://core.svn.wordpress.org/branches/4.5@40338 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-04-17 13:14:34 +00:00
James Nylen 5d48102386 Bump 4.5 branch to version 4.5.7. 
Built from https://develop.svn.wordpress.org/branches/4.5@40204


git-svn-id: http://core.svn.wordpress.org/branches/4.5@40143 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-03-06 16:18:31 +00:00
John Blackbourn 806d303a20 Press This: Verify intent before fetching in-page resources using Press This. 
Props vortfu

Merges [40195] to the 4.5 branch.

Built from https://develop.svn.wordpress.org/branches/4.5@40198


git-svn-id: http://core.svn.wordpress.org/branches/4.5@40137 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-03-06 13:59:30 +00:00
Aaron Campbell a9f9235d88 Strip control characters before validating redirect. 
Merges [40183] to 4.5 branch.

Built from https://develop.svn.wordpress.org/branches/4.5@40186


git-svn-id: http://core.svn.wordpress.org/branches/4.5@40125 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-03-06 13:42:04 +00:00
Aaron Campbell 10a2dd32cf Plugins: Add file check to plugin deletions. 
Merges [40169] to 4.5 branch.


Built from https://develop.svn.wordpress.org/branches/4.5@40172


git-svn-id: http://core.svn.wordpress.org/branches/4.5@40111 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-03-06 13:00:33 +00:00
Dominik Schilling 4c805032cb Embeds: URL encode YouTube video IDs for broader compatibility. 
Merge of [40160] to the 4.5 branch.

Built from https://develop.svn.wordpress.org/branches/4.5@40163


git-svn-id: http://core.svn.wordpress.org/branches/4.5@40102 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-03-06 12:06:05 +00:00
Jeremy Felt d3d39735ce Validate video and audio metadata. 
Merge of [40148] to the 4.5 branch.

Built from https://develop.svn.wordpress.org/branches/4.5@40151


git-svn-id: http://core.svn.wordpress.org/branches/4.5@40090 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-03-06 08:05:33 +00:00
Aaron Campbell 5697303ab4 Bump 4.5 branch to version 4.5.6. 
Built from https://develop.svn.wordpress.org/branches/4.5@39998


git-svn-id: http://core.svn.wordpress.org/branches/4.5@39935 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-26 18:21:32 +00:00
John Blackbourn 864dc6eb0d Posts, Post Types: When using Excerpt mode on the Posts list table, ensure the excerpt output matches what was manually entered into the Excerpt field. 
Merges [39956] to the 4.5 branch.

Built from https://develop.svn.wordpress.org/branches/4.5@39977


git-svn-id: http://core.svn.wordpress.org/branches/4.5@39914 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-26 14:14:26 +00:00
Dominik Schilling 4bc646125d Press This: Do not show Categories & Tags UI for users who cannot assign terms to posts anyways. 
Merge of [39968] to the 4.5 branch.
Built from https://develop.svn.wordpress.org/branches/4.5@39972


git-svn-id: http://core.svn.wordpress.org/branches/4.5@39909 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-26 14:11:03 +00:00
Dominik Schilling aa2ad2c3dd Query: Ensure that queries work correctly with post type names with special characters. 
Merge of [39952] to the 4.5 branch.
Built from https://develop.svn.wordpress.org/branches/4.5@39958


git-svn-id: http://core.svn.wordpress.org/branches/4.5@39895 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-26 13:50:32 +00:00
Aaron Campbell 438fd7f3bb Bump 4.5 branch to version 4.5.5. 
Built from https://develop.svn.wordpress.org/branches/4.5@39862


git-svn-id: http://core.svn.wordpress.org/branches/4.5@39799 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-11 16:55:29 +00:00
Joe McGill a1d67608bf Media: Fix exif_imagetype check in wp_get_image_mime 
This is a follow up to [39831].

Merges [39850] to the 4.5 branch.

Built from https://develop.svn.wordpress.org/branches/4.5@39853


git-svn-id: http://core.svn.wordpress.org/branches/4.5@39790 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-11 16:40:32 +00:00
Joe McGill a8dcdd4fd5 Media: Improve image filetype checking. 
This adds a new function `wp_get_image_mime()` which is used by
`wp_check_filetype_and_ext()` to validate image files using
`exif_imagetype()` if available instead of `getimagesize()`.

`getimagesize()` is less performant than `exif_imagetype()` and is
dependent on GD. If `exif_imagetype()` is not available, it falls back to
`getimagesize()` as before.

If `wp_check_filetype_and_ext()` can't validate the filetype, we now return
`false` for ext/MIME values.

Merges [39831] to the 4.5 branch.

Built from https://develop.svn.wordpress.org/branches/4.5@39834


git-svn-id: http://core.svn.wordpress.org/branches/4.5@39772 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-11 13:15:31 +00:00
Dominik Schilling 85deec68b8 Updates: Translate plugin data on the Updates screen. 
Merge of [39808] to the 4.5 branch.
Built from https://develop.svn.wordpress.org/branches/4.5@39822


git-svn-id: http://core.svn.wordpress.org/branches/4.5@39760 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-11 11:40:38 +00:00
Dominik Schilling c1684e38b0 Themes: Fix markup for theme name fallbacks. 
Merge of [39807] to the 4.5 branch.
Built from https://develop.svn.wordpress.org/branches/4.5@39811


git-svn-id: http://core.svn.wordpress.org/branches/4.5@39749 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-11 11:10:05 +00:00
Jeremy Felt 13d318d196 Multisite: Use `wp_rand()` in signup key creation. 
Merges [39795] to the 4.5 branch.

Built from https://develop.svn.wordpress.org/branches/4.5@39798


git-svn-id: http://core.svn.wordpress.org/branches/4.5@39736 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-11 05:33:32 +00:00
Dion Hulse 440b7b387f Update PHPMailer to 5.2.22. 
The full list of changes is available here:
https://github.com/PHPMailer/PHPMailer/compare/v5.2.21...v5.2.22

Merges [39759] to the 4.5 branch.
Fixes #37210 for 4.5.

Built from https://develop.svn.wordpress.org/branches/4.5@39786


git-svn-id: http://core.svn.wordpress.org/branches/4.5@39724 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-11 05:23:31 +00:00
Jeremy Felt 2996d445f2 Mail: Disable wp-mail.php when `mailserver_url` is mail.example.com. 
Merges [39772] to the 4.5 branch.

Built from https://develop.svn.wordpress.org/branches/4.5@39775


git-svn-id: http://core.svn.wordpress.org/branches/4.5@39713 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-11 05:17:05 +00:00
Aaron Campbell 1bed90114d Add nonce for widget accessibility mode. 
Props vortfu.

See #23328.

Merges [39760] to 4.5 branch.

Built from https://develop.svn.wordpress.org/branches/4.5@39763


git-svn-id: http://core.svn.wordpress.org/branches/4.5@39701 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-11 01:44:31 +00:00
Dion Hulse f991d9356c Mail: Upgrade PHPMailer to 5.2.21. 
Merges [39645] to the 4.5 branch.
See #37210.

Built from https://develop.svn.wordpress.org/branches/4.5@39723


git-svn-id: http://core.svn.wordpress.org/branches/4.5@39663 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-06 22:04:36 +00:00
Joe McGill da1c938fe9 Media: Improved media titles when created from filename. 
Preserves spaces and generally creates more accurate, cleaner titles from filenames of uploaded media.

Merge of [38615] to the 4.5 branch.

Fixes #37989.

Built from https://develop.svn.wordpress.org/branches/4.5@39711


git-svn-id: http://core.svn.wordpress.org/branches/4.5@39651 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-06 21:59:35 +00:00
Dion Hulse 3b209fe208 General: Update copyright year to 2017 in license.txt. 
Props Nikschavan.
Merges [39659] to the 4.5 branch.
Fixes #39433.

Built from https://develop.svn.wordpress.org/branches/4.5@39699


git-svn-id: http://core.svn.wordpress.org/branches/4.5@39639 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-05 08:39:11 +00:00
Jeremy Felt 34ea4c35f4 Bump 4.5 branch to 4.5.4. 
Built from https://develop.svn.wordpress.org/branches/4.5@38550


git-svn-id: http://core.svn.wordpress.org/branches/4.5@38493 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2016-09-07 14:58:31 +00:00
Jeremy Felt ff1790b8e8 Media: Sanitize upload filename. 
Merge of [38538] to the 4.5 branch.

Built from https://develop.svn.wordpress.org/branches/4.5@38540


git-svn-id: http://core.svn.wordpress.org/branches/4.5@38483 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2016-09-07 13:57:58 +00:00
Pascal Birchler b7bb8822d7 Upgrade/Install: Sanitize file name in `File_Upload_Upgrader`. 
Merge of [38524] to the 4.5 branch.
Built from https://develop.svn.wordpress.org/branches/4.5@38526


git-svn-id: http://core.svn.wordpress.org/branches/4.5@38467 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2016-09-06 17:34:33 +00:00
Dominik Schilling c1e4d25350 The 4.5 branch is now 4.5.4-alpha. 
Built from https://develop.svn.wordpress.org/branches/4.5@38000


git-svn-id: http://core.svn.wordpress.org/branches/4.5@37941 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2016-07-07 12:07:32 +00:00
Boone Gorges bf6eb0bc86 Fix About changelog for 4.5.3. 
Built from https://develop.svn.wordpress.org/branches/4.5@37828


git-svn-id: http://core.svn.wordpress.org/branches/4.5@37793 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2016-06-21 16:16:28 +00:00
Boone Gorges 5843d8201a 4.5.3 fixes 17 bugs, not 16. 
Built from https://develop.svn.wordpress.org/branches/4.5@37827


git-svn-id: http://core.svn.wordpress.org/branches/4.5@37792 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2016-06-21 15:56:28 +00:00
Boone Gorges b15f7577d3 Bump 4.5 branch to 4.5.3. 
Built from https://develop.svn.wordpress.org/branches/4.5@37826


git-svn-id: http://core.svn.wordpress.org/branches/4.5@37791 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2016-06-21 15:53:29 +00:00
Pascal Birchler 47e67b7d33 Media: Fix rendering of incorrect toolbar in the Edit view. 
This switches event binding in `wp.media.controller.EditImage` to use `on`
instead of `listenTo` to restore rendering of the correct toolbar when the
`toolbar:render:edit-image` event fires. The existing listeners broke
when we upgraded Backbone in [36546].

Merge of [37678] to the 4.5 branch.

Props adamsilverstein.
Fixes #36861.
Built from https://develop.svn.wordpress.org/branches/4.5@37813


git-svn-id: http://core.svn.wordpress.org/branches/4.5@37778 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2016-06-21 14:55:30 +00:00
Joe McGill b747172c20 Media: Improve handling of extensionless filenames. 
Merge of [37756] to the 4.5 branch.

See #37111.
Built from https://develop.svn.wordpress.org/branches/4.5@37809


git-svn-id: http://core.svn.wordpress.org/branches/4.5@37774 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2016-06-21 14:52:06 +00:00