WordPress-C/WordPress
1
0
Fork 0
mirror of https://github.com/WordPress/WordPress.git synced 2025-03-04 12:29:22 +00:00
Code Issues Packages Projects Releases Wiki Activity
28,595 Commits 50 Branches 750 Tags
Commit Graph

13561 Commits

Author SHA1 Message Date
John Blackbourn
6c7de13e11 Filesystem API: Ensure filenames are valid before attempting to unzip them to ensure malformed file paths don't cause issues. 
Merges [41457] to the 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@41465


git-svn-id: http://core.svn.wordpress.org/branches/4.1@41298 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-09-19 14:44:20 +00:00
John Blackbourn
dc11b33974 General: Add missing URL-encoding and add extra hardening to plugin and template names when they're displayed in the admin area. 
Merges [41434] with changes to the 4.1 branch.

See #13377

Built from https://develop.svn.wordpress.org/branches/4.1@41446


git-svn-id: http://core.svn.wordpress.org/branches/4.1@41279 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-09-19 13:39:24 +00:00
Dominik Schilling
8c8a907ba3 Users: Provide a fallback for incorrect HTTP referrers. 
Merge of [41398] to the 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@41424


git-svn-id: http://core.svn.wordpress.org/branches/4.1@41257 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-09-19 11:14:59 +00:00
Aaron Campbell
9eb95c11ff Bump 4.1 branch to version 4.1.18. 
Built from https://develop.svn.wordpress.org/branches/4.1@40754


git-svn-id: http://core.svn.wordpress.org/branches/4.1@40612 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-05-16 21:53:24 +00:00
Aaron Campbell
1a65464490 Add nonce for updating file system credentials. 
Merges [40723] to 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@40730


git-svn-id: http://core.svn.wordpress.org/branches/4.1@40588 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-05-16 14:56:48 +00:00
Dominik Schilling
f1dd14eb48 Customize: Ignore invalid customization sessions. 
Merge of [40704] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@40711


git-svn-id: http://core.svn.wordpress.org/branches/4.1@40574 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-05-16 12:20:25 +00:00
Pascal Birchler
d4a45dc58d Bump 4.1 branch to version 4.1.17. 
Built from https://develop.svn.wordpress.org/branches/4.1@40493


git-svn-id: http://core.svn.wordpress.org/branches/4.1@40369 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-04-20 16:27:26 +00:00
Pascal Birchler
d0682377ef Fix broken audio/video functions when sanitizing ID3 data 
This fixes a bug where running `wp_kses_post_deep()` on all the ID3
tag data corrupted blob data.

See #40075, #40085.

Merges [40400] to the 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@40466


git-svn-id: http://core.svn.wordpress.org/branches/4.1@40342 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-04-17 13:29:25 +00:00
James Nylen
d19df5f1e4 Bump 4.1 branch to version 4.1.16. 
Built from https://develop.svn.wordpress.org/branches/4.1@40208


git-svn-id: http://core.svn.wordpress.org/branches/4.1@40147 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-03-06 16:35:25 +00:00
Aaron Campbell
a0922a8e99 Plugins: Add file check to plugin deletions. 
Merges [40169] to 4.1 branch.


Built from https://develop.svn.wordpress.org/branches/4.1@40176


git-svn-id: http://core.svn.wordpress.org/branches/4.1@40115 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-03-06 13:03:54 +00:00
Jeremy Felt
2702705876 Validate video and audio metadata. 
Merge of [40148] to the 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@40155


git-svn-id: http://core.svn.wordpress.org/branches/4.1@40094 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-03-06 08:10:27 +00:00
Aaron Campbell
c0abe8d804 Bump 4.1 branch to version 4.1.15. 
Built from https://develop.svn.wordpress.org/branches/4.1@40002


git-svn-id: http://core.svn.wordpress.org/branches/4.1@39939 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-26 18:26:25 +00:00
John Blackbourn
64094ebb31 Posts, Post Types: When using Excerpt mode on the Posts list table, ensure the excerpt output matches what was manually entered into the Excerpt field. 
Merges [39956] to the 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@39985


git-svn-id: http://core.svn.wordpress.org/branches/4.1@39922 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-26 14:18:24 +00:00
Dominik Schilling
474af50d38 Press This: Do not show Categories & Tags UI for users who cannot assign terms to posts anyways. 
Merge of [39968] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@39976


git-svn-id: http://core.svn.wordpress.org/branches/4.1@39913 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-26 14:13:55 +00:00
Aaron Campbell
edd582c69e Bump 4.1 branch to version 4.1.14. 
Built from https://develop.svn.wordpress.org/branches/4.1@39866


git-svn-id: http://core.svn.wordpress.org/branches/4.1@39803 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-11 16:58:53 +00:00
Dominik Schilling
4167b5b2cf Updates: Translate plugin data on the Updates screen. 
Merge of [39808] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@39826


git-svn-id: http://core.svn.wordpress.org/branches/4.1@39764 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-11 11:42:50 +00:00
Aaron Campbell
be45faec74 Add nonce for widget accessibility mode. 
Props vortfu.

See #23328.

Merges [39765] to 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@39767


git-svn-id: http://core.svn.wordpress.org/branches/4.1@39705 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-11 01:50:26 +00:00
Joe McGill
9ee6a9ad66 Media: Improved media titles when created from filename. 
Preserves spaces and generally creates more accurate, cleaner titles from filenames of uploaded media.

Merge of [38615] to the 4.1 branch.

Fixes #37989.

Built from https://develop.svn.wordpress.org/branches/4.1@39715


git-svn-id: http://core.svn.wordpress.org/branches/4.1@39655 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-06 22:01:26 +00:00
Jeremy Felt
9a9ecd5c32 Bump 4.1 branch to 4.1.13. 
Built from https://develop.svn.wordpress.org/branches/4.1@38554


git-svn-id: http://core.svn.wordpress.org/branches/4.1@38497 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2016-09-07 15:00:58 +00:00
Jeremy Felt
98ead2d8bb Media: Sanitize upload filename. 
Merge of [38538] to the 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@38544


git-svn-id: http://core.svn.wordpress.org/branches/4.1@38487 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2016-09-07 13:59:54 +00:00
Pascal Birchler
0be5d63999 Upgrade/Install: Sanitize file name in File_Upload_Upgrader. 
Merge of [38524] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@38530


git-svn-id: http://core.svn.wordpress.org/branches/4.1@38471 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2016-09-06 17:57:23 +00:00
Boone Gorges
3d28255a66 Bump 4.1 branch to 4.1.12. 
Built from https://develop.svn.wordpress.org/branches/4.1@37832


git-svn-id: http://core.svn.wordpress.org/branches/4.1@37797 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2016-06-21 16:39:24 +00:00
Nikolay Bachiyski
7fcd5f5219 Admin: escape URL-encoded permalinks 
Merge of [37801] to the 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@37815


git-svn-id: http://core.svn.wordpress.org/branches/4.1@37780 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2016-06-21 14:56:22 +00:00
Rachel Baker
7e883711c3 Revisions: Change the capability needed to view revision diffs to edit_post. 
Merge of [37779] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@37800


git-svn-id: http://core.svn.wordpress.org/branches/4.1@37765 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2016-06-21 14:46:22 +00:00
Boone Gorges
79e7b2e6aa Taxonomy: More specific cap check when processing category data on post save. 
Ports [37691] to the 4.1 branch.

Props dlh.
Fixes #36379.
Built from https://develop.svn.wordpress.org/branches/4.1@37781


git-svn-id: http://core.svn.wordpress.org/branches/4.1@37746 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2016-06-21 14:22:56 +00:00
Dominik Schilling
65b88f9802 Customize: Make sure that preview and return URLs are URLs. 
Merge of [37527] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@37773


git-svn-id: http://core.svn.wordpress.org/branches/4.1@37738 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2016-06-21 14:20:25 +00:00
Dominik Schilling
2dbd645312 Bump 4.1 branch to 4.1.11. 
Built from https://develop.svn.wordpress.org/branches/4.1@37388


git-svn-id: http://core.svn.wordpress.org/branches/4.1@37354 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2016-05-06 18:14:22 +00:00
Jeremy Felt
92c3f699a9 Multisite: Improve escaping in network settings. 
Merge of [37124] to the 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@37128


git-svn-id: http://core.svn.wordpress.org/branches/4.1@37095 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2016-03-30 16:05:21 +00:00
Dominik Schilling
cd0d7d699d Multisite: Validate new email address confirmations. 
Merge of [37103] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@37107


git-svn-id: http://core.svn.wordpress.org/branches/4.1@37074 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2016-03-30 14:50:48 +00:00
Dominik Schilling
7df345b1cc Bump 4.1 branch to 4.1.10. 
Built from https://develop.svn.wordpress.org/branches/4.1@36458


git-svn-id: http://core.svn.wordpress.org/branches/4.1@36425 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2016-02-02 17:29:22 +00:00
Dominik Schilling
197d5128b2 Bump 4.1 branch to 4.1.9. 
Built from https://develop.svn.wordpress.org/branches/4.1@36199


git-svn-id: http://core.svn.wordpress.org/branches/4.1@36166 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2016-01-06 18:50:23 +00:00
Helen Hou-Sandí
a4add78415 Bump 4.1 branch to 4.1.8. 
Built from https://develop.svn.wordpress.org/branches/4.1@34183


git-svn-id: http://core.svn.wordpress.org/branches/4.1@34151 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2015-09-15 14:28:10 +00:00
Dominik Schilling
d38d60223d XMLRPC: Don't allow private posts to be sticky. 
Merge of [33325], [33612], and [34135] to the 4.1 branch.

See #20662.
Built from https://develop.svn.wordpress.org/branches/4.1@34153


git-svn-id: http://core.svn.wordpress.org/branches/4.1@34121 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2015-09-14 23:01:22 +00:00
Nikolay Bachiyski
0da231a2d9 List tables: escape user e-mails 
Merges [34133] for 4.1 branch

Built from https://develop.svn.wordpress.org/branches/4.1@34139


git-svn-id: http://core.svn.wordpress.org/branches/4.1@34107 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2015-09-14 22:42:23 +00:00
Dominik Schilling
9460b427a2 Bump 4.1 branch to version 4.1.7. 
Built from https://develop.svn.wordpress.org/branches/4.1@33574


git-svn-id: http://core.svn.wordpress.org/branches/4.1@33541 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2015-08-04 11:51:21 +00:00
Dominik Schilling
f5171862ba Heartbeat: Ensure post locks are released. 
Merge of [33542] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@33544


git-svn-id: http://core.svn.wordpress.org/branches/4.1@33511 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2015-08-04 04:55:19 +00:00
Gary Pendergast
fae5374051 Bump 4.1 branch to version 4.1.6. 
Built from https://develop.svn.wordpress.org/branches/4.1@33396


git-svn-id: http://core.svn.wordpress.org/branches/4.1@33364 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2015-07-23 11:05:21 +00:00
Gary Pendergast
a9e97c7ad5 Capabilities: When creating an auto-draft, ensure that the current user still has permission to do so. 
Merge of [33357] to the 4.1 branch.


Built from https://develop.svn.wordpress.org/branches/4.1@33375


git-svn-id: http://core.svn.wordpress.org/branches/4.1@33346 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2015-07-23 03:54:21 +00:00
Michael Adams
3989e1f450 Upgrade: $wpdb->get_col_length() sanity check: bail on unexpected return value. 
Merges [32429] for the 4.1 branch.

See #32165.

Built from https://develop.svn.wordpress.org/branches/4.1@32431


git-svn-id: http://core.svn.wordpress.org/branches/4.1@32401 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2015-05-06 23:13:22 +00:00
Dominik Schilling
3e3300395a Add closing paragraph tag for the 4.1.5 changelog entry. 
Built from https://develop.svn.wordpress.org/branches/4.1@32428


git-svn-id: http://core.svn.wordpress.org/branches/4.1@32398 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2015-05-06 23:04:23 +00:00
Dominik Schilling
3aa108639d 4.1.5 version bumps. 
Built from https://develop.svn.wordpress.org/branches/4.1@32425


git-svn-id: http://core.svn.wordpress.org/branches/4.1@32395 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2015-05-06 22:18:23 +00:00
Michael Adams
2b8283ed89 Upgrade: Ensure unintelligible DB schemas don't result in content loss. 
Merge of [32417] to the 4.1 branch.

See #32165.

Props ocean90.

Built from https://develop.svn.wordpress.org/branches/4.1@32419


git-svn-id: http://core.svn.wordpress.org/branches/4.1@32389 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2015-05-06 21:51:24 +00:00
Aaron Jorbin
26563868af When upgrading WordPress remove genericons example.html files 
[32385] for 4.1 branch

Props @dd32, @boonebgorges, @johnjamesjacoby, @drewapicture, @jorbin


Built from https://develop.svn.wordpress.org/branches/4.1@32401


git-svn-id: http://core.svn.wordpress.org/branches/4.1@32371 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2015-05-06 19:58:22 +00:00
Michael Adams
bb96e5b686 WPDB: When checking that a string can be sent to MySQL, we shouldn't use mb_convert_encoding(), as it behaves differently to MySQL's character encoding conversion. 
Merge of [32364] to the 4.1 branch.

Props mdawaffe, pento, nbachiyski, jorbin, johnjamesjacoby, jeremyfelt.

See #32165.

Built from https://develop.svn.wordpress.org/branches/4.1@32387


git-svn-id: http://core.svn.wordpress.org/branches/4.1@32357 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2015-05-06 19:07:25 +00:00
Gary Pendergast
9037f65f7a 4.1: When upgrading, remove any suspicious comments. 
Built from https://develop.svn.wordpress.org/branches/4.1@32312


git-svn-id: http://core.svn.wordpress.org/branches/4.1@32283 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2015-04-27 17:13:24 +00:00
Helen Hou-Sandí
5f82891015 The 4.1 branch is now 4.1.3. 
Built from https://develop.svn.wordpress.org/branches/4.1@32281


git-svn-id: http://core.svn.wordpress.org/branches/4.1@32252 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2015-04-23 19:57:25 +00:00
Gary Pendergast
40fd7427e5 4.1: Update about.php. 
Built from https://develop.svn.wordpress.org/branches/4.1@32220


git-svn-id: http://core.svn.wordpress.org/branches/4.1@32194 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2015-04-20 17:41:23 +00:00
Gary Pendergast
9d3a4d67c2 Ensure post titles are correctly escaped on the Dashboard. Merge of [32175] to the 4.1 branch. 
Props helen, ocean90, dd32, pento.


Built from https://develop.svn.wordpress.org/branches/4.1@32176


git-svn-id: http://core.svn.wordpress.org/branches/4.1@32151 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2015-04-20 07:42:23 +00:00
Dion Hulse
ae731c8312 Upgrades: Specifically pass the 'version' and 'locale' POST vars through the Core Update FTP credentials form. 
This bug was introduced with [30384] / #30245.
Merges [31527] to the 4.1 branch.
Fixes #31378.

Built from https://develop.svn.wordpress.org/branches/4.1@31528


git-svn-id: http://core.svn.wordpress.org/branches/4.1@31509 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2015-02-24 03:24:25 +00:00
Andrew Nacin
67990a8e87 Remove errant string. 
Built from https://develop.svn.wordpress.org/branches/4.1@31475


git-svn-id: http://core.svn.wordpress.org/branches/4.1@31456 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2015-02-18 21:46:22 +00:00