WordPress-C
/
WordPress
mirror of https://github.com/WordPress/WordPress.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
25,943 Commits 50 Branches 749 Tags 982 MiB
Commit Graph

12756 Commits

Author SHA1 Message Date
Peter Wilson 76d45db169 WordPress 3.9.40. 
Built from https://develop.svn.wordpress.org/branches/3.9@54906


git-svn-id: http://core.svn.wordpress.org/branches/3.9@54458 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2022-11-30 00:16:15 +00:00
Peter Wilson f52be5bdd5 Security: Replace update nag to indicate end of support. 
Replace update nag in WordPress 3.9 to indicate users need to update to a newer version of WordPress in order to continue receiving security updates.

Props peterwilsoncc, audrasjb.
Fixes #56786 for the 3.9 branch.


Built from https://develop.svn.wordpress.org/branches/3.9@54899


git-svn-id: http://core.svn.wordpress.org/branches/3.9@54451 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2022-11-29 22:02:17 +00:00
Peter Wilson 13ffb86585 WordPress 3.9.39 
Built from https://develop.svn.wordpress.org/branches/3.9@54626


git-svn-id: http://core.svn.wordpress.org/branches/3.9@54178 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2022-10-17 22:25:16 +00:00
Sergey Biryukov 0f259c3f9f WordPress 3.9.38. 
Built from https://develop.svn.wordpress.org/branches/3.9@54578


git-svn-id: http://core.svn.wordpress.org/branches/3.9@54132 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2022-10-17 19:41:16 +00:00
Peter Wilson 3546a437c6 Security: Introduce strings to indicate support status. 
Add strings for use in future maintenance/security releases to indicate the security support status of the version of WordPress.

Two strings are introduced:

* indicating the version of WordPress is not receiving security updates, and,
* indicating the version of WordPress will shortly stop receiving security updates.

This change does not make use of the strings, the purpose is to make them available to translators prior to dropping support of selected versions of WordPress.

Props costdev, chesio, robinwpdeveloper, desrosj, rudlinkon, mukesh27, sumitbagthariya16.
Merges [54322] to the 3.9 branch.
See #56532.

Built from https://develop.svn.wordpress.org/branches/3.9@54461


git-svn-id: http://core.svn.wordpress.org/branches/3.9@54020 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2022-10-10 22:27:16 +00:00
desrosj 097538dfab WordPress 3.9.37. 
Built from https://develop.svn.wordpress.org/branches/3.9@54008


git-svn-id: http://core.svn.wordpress.org/branches/3.9@53567 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2022-08-30 17:39:02 +00:00
Sergey Biryukov a2f280aa5c Grouped backports to the 3.9 branch. 
- Posts, Post Types: Escape output within `the_meta()`.
- General: Ensure bookmark query limits are numeric.
- Plugins: Escape output in error messages.

Merges [53958-53960] to the 3.9 branch.
Props tykoted, martinkrcho, xknown, dd32, peterwilsoncc, paulkevan, timothyblynjacobs.

Built from https://develop.svn.wordpress.org/branches/3.9@53984


git-svn-id: http://core.svn.wordpress.org/branches/3.9@53543 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2022-08-30 15:55:16 +00:00
Sergey Biryukov 997dd0e0c8 WordPress 3.9.36. 
Built from https://develop.svn.wordpress.org/branches/3.9@52882


git-svn-id: http://core.svn.wordpress.org/branches/3.9@52471 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2022-03-10 22:09:41 +00:00
desrosj e635f703f1 WordPress 3.9.35. 
Built from https://develop.svn.wordpress.org/branches/3.9@52506


git-svn-id: http://core.svn.wordpress.org/branches/3.9@52098 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2022-01-06 18:57:34 +00:00
desrosj 42d50b9cc7 Grouped backports to the 3.9 branch. 
- Query: Improve sanitization within `WP_Tax_Query`.
- Upgrade/Install: Avoid using `unserialize()` unnecessarily.
- Formatting: Correctly encode ASCII characters in post slugs.

Merges [52454,52456-52457] to the 3.9 branch.
Props vortfu, dd32, ehtis, zieladam, whyisjake, xknown, peterwilsoncc, desrosj, iandunn.
Built from https://develop.svn.wordpress.org/branches/3.9@52484


git-svn-id: http://core.svn.wordpress.org/branches/3.9@52076 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2022-01-06 18:26:33 +00:00
Peter Wilson 175a54e643 WordPress 3.9.34. 
Built from https://develop.svn.wordpress.org/branches/3.9@50887


git-svn-id: http://core.svn.wordpress.org/branches/3.9@50496 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2021-05-12 23:25:15 +00:00
desrosj d00bf5ee24 Build/Test Tools: Backport GitHub Action and build improvements to the 3.9 branch. 
This backports several build and test tool improvements to the 3.9 branch. Most notably, this includes:

- The changes required to allow each workflow to be triggered by the `workflow_dispatch` event so that tests can be run on a schedule [50590].
- Splitting single site and multisite tests into parallel jobs [50379].
- Split slow tests into separate, parallel jobs for PHP <= 5.6 [50444].
- Better branch and path scoping for GitHub Action workflows when running on `pull_request` [50432,50479].
- Several `devDependency` updates.

Merges [50379,50387,50416,50432,50435-50436,50444,50446,50473-50474,50476,50479,50485-50487,50545,50590] to the 3.9 branch.
See #50401, #51801, #51802, #52548, #52612, #52624, #52625, #52645, #52653, #52658, #52660, #52667.
Built from https://develop.svn.wordpress.org/branches/3.9@50645


git-svn-id: http://core.svn.wordpress.org/branches/3.9@50257 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2021-04-02 16:05:17 +00:00
desrosj 0ae050a6c6 Build/Test Tools: Support NodeJS 14.x in the 3.9 branch. 
This updates the 3.9 branch to support the latest LTS version of NodeJS (currently 14.x), allowing the same version to be used across all WordPress branches that receive security updates as a courtesy.

Because older branches use (really) old versions of NodeJS, the local Docker environment cannot be backported since the needed dependencies will not run on these older versions (see #48301). This also blocks the ability to move automated testing over to GitHub Actions (see #50401).

This change also introduces a `packager-lock.json` file to the branch.

In addition to backporting the package updates that happened after branching 3.9, dependencies that were removed in future releases have also been updated to their latest versions.

Props desrosj, dd32, netweb, jorbin.
Merges [28695,28796,28821,29270,29505,29858-30059,30061-30063,30066-30067,31425,31504,31557,31648-31650,32356-32357,32988,33726,35363,35513,35521,35538-35541,35859,36861-36865,37017,37019,37020,37212,37612,38111,39110,39113,39115-39117,39478,41835,42460-42461,42463,42887,43320,43323,43977,44219,44233,45321,45765,46404,46408-46409,47404,47867,47872-47873,48705,49636,49933,49937,49939,50126,50176,50185] to the 3.9 branch.
See #52341.
Built from https://develop.svn.wordpress.org/branches/3.9@50220


git-svn-id: http://core.svn.wordpress.org/branches/3.9@49886 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2021-02-05 04:40:29 +00:00
desrosj 52f7b371de WordPress 3.9.33. 
Built from https://develop.svn.wordpress.org/branches/3.9@49425


git-svn-id: http://core.svn.wordpress.org/branches/3.9@49184 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2020-10-29 19:43:06 +00:00
whyisjake 03372aee6e General: WordPress updates 
* XML-RPC: Improve error messages for unprivileged users.
* External Libraries: Disable deserialization in Requests_Utility_FilteredIterator
* Embeds: Disable embeds on deactivated Multisite sites.
* Coding standards: Modify escaping functions to avoid potential false positives.
* XML-RPC: Return error message if attachment ID is incorrect.
* Upgrade/install: Improve logic check when determining installation status.
* Meta: Sanitize meta key before checking protection status.
* Themes: Ensure that only privileged users can set a background image when a theme is using the deprecated custom background page.

Brings the changes from [49380,49382-49388] to the 3.9 branch.

Props xknown, zieladam, peterwilsoncc, whyisjake, desrosj, dd32.

Built from https://develop.svn.wordpress.org/branches/3.9@49407


git-svn-id: http://core.svn.wordpress.org/branches/3.9@49166 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2020-10-29 19:15:11 +00:00
Sergey Biryukov 896d4d588b Administration: Pass the result of `set-screen-option` filter to the new `set_screen_option_{$option}` filter to ensure backward compatibility. 
Rename the `$keep` parameter of both filters to `$screen_option` for clarity, update the documentation to better reflect its purpose.

Follow-up to [47951].

Props Chouby, sswells, SergeyBiryukov.
Merges [48241] to the 3.9 branch.
Fixes #50392.
Built from https://develop.svn.wordpress.org/branches/3.9@48259


git-svn-id: http://core.svn.wordpress.org/branches/3.9@48028 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2020-07-01 09:54:23 +00:00
desrosj 9f7a3edab3 WordPress 3.9.32. 
Built from https://develop.svn.wordpress.org/branches/3.9@48004


git-svn-id: http://core.svn.wordpress.org/branches/3.9@47772 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2020-06-10 21:40:26 +00:00
Sergey Biryukov c7feb3f848 Themes: Ensure a broken theme name is returned properly. 
Follow-up to [47966] for the 3.9 branch.
Built from https://develop.svn.wordpress.org/branches/3.9@47979


git-svn-id: http://core.svn.wordpress.org/branches/3.9@47748 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2020-06-10 18:56:31 +00:00
whyisjake 6965572495 General: Backport several commits for release. 
- Embeds: Ensure that the title attribute is set correctly on embeds.
- Editor: Prevent HTML decoding on by setting the proper editor context.
- Formatting: Ensure that wp_validate_redirect() sanitizes a wider variety of characters.
- Themes: Ensure a broken theme name is returned properly.
- Administration: Add a new filter to extend set-screen-option.
Merges [47947-47951] to the 3.9 branch.
Props xknown, sstoqnov, vortfu, SergeyBiryukov, whyisjake.

Built from https://develop.svn.wordpress.org/branches/3.9@47966


git-svn-id: http://core.svn.wordpress.org/branches/3.9@47737 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2020-06-10 18:52:30 +00:00
desrosj c623e36b53 Updating the About page for WordPress 3.9.31 
Built from https://develop.svn.wordpress.org/branches/3.9@47687


git-svn-id: http://core.svn.wordpress.org/branches/3.9@47464 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2020-04-29 18:15:11 +00:00
Sergey Biryukov a6e4d88a7a WordPress 3.9.30 
Built from https://develop.svn.wordpress.org/branches/3.9@46934


git-svn-id: http://core.svn.wordpress.org/branches/3.9@46734 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2019-12-12 20:35:11 +00:00
desrosj dc7409e713 WordPress 3.9.29. 
Built from https://develop.svn.wordpress.org/branches/3.9@46521


git-svn-id: http://core.svn.wordpress.org/branches/3.9@46318 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2019-10-14 20:19:11 +00:00
desrosj fab981a1cb WordPress 3.9.28. 
Built from https://develop.svn.wordpress.org/branches/3.9@46033


git-svn-id: http://core.svn.wordpress.org/branches/3.9@45845 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2019-09-04 22:02:29 +00:00
Sergey Biryukov e1a05244d9 Escape the output in `wp_ajax_upload_attachment()`. 
Merges [45936] to the 3.9 branch.
Props whyisjake, sstoqnov.
Built from https://develop.svn.wordpress.org/branches/3.9@45966


git-svn-id: http://core.svn.wordpress.org/branches/3.9@45777 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2019-09-04 16:48:23 +00:00
Gary Pendergast 8c00811afd WordPress 3.9.27 
Built from https://develop.svn.wordpress.org/branches/3.9@44888


git-svn-id: http://core.svn.wordpress.org/branches/3.9@44719 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2019-03-13 03:05:12 +00:00
Sergey Biryukov df6538cd9e Comments: Improve comment content filtering. 
Merges [44842] to the 3.9 branch.
Built from https://develop.svn.wordpress.org/branches/3.9@44855


git-svn-id: http://core.svn.wordpress.org/branches/3.9@44687 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2019-03-12 22:50:12 +00:00
Jeremy Felt 3fa991919a Bump 3.9 branch to version 3.9.26. 
Built from https://develop.svn.wordpress.org/branches/3.9@44088


git-svn-id: http://core.svn.wordpress.org/branches/3.9@43918 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2018-12-13 02:16:19 +00:00
Gary Pendergast 188c405997 Editor: Remove unwanted fields before saving posts. 
The `meta_input`, `file`, and `guid` fields are not intended to be updated through user input.

Merges [44047] to the 3.9 branch.


Built from https://develop.svn.wordpress.org/branches/3.9@44072


git-svn-id: http://core.svn.wordpress.org/branches/3.9@43902 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2018-12-13 01:59:10 +00:00
Peter Wilson 69cb93fc01 Multisite: Validate activation links. 
Merges [44048] to the 3.9 branch.

Built from https://develop.svn.wordpress.org/branches/3.9@44071


git-svn-id: http://core.svn.wordpress.org/branches/3.9@43901 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2018-12-13 01:58:11 +00:00
Aaron Campbell 682e48d5bd Bump 3.9 branch to version 3.9.25 
Built from https://develop.svn.wordpress.org/branches/3.9@43417


git-svn-id: http://core.svn.wordpress.org/branches/3.9@43245 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2018-07-05 16:14:11 +00:00
Aaron Campbell b5bae28a24 Bump 3.9 branch to version 3.9.24 
Built from https://develop.svn.wordpress.org/branches/3.9@42943


git-svn-id: http://core.svn.wordpress.org/branches/3.9@42773 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2018-04-03 20:32:23 +00:00
Dion Hulse 1b8cce073d Bump the 3.9 branch to 3.9.23. 
Built from https://develop.svn.wordpress.org/branches/3.9@42504


git-svn-id: http://core.svn.wordpress.org/branches/3.9@42333 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2018-01-16 21:47:15 +00:00
Dion Hulse c46690c68b External Libraries: Remove unnecessary / obsoleted MediaElement.js files. 
Merges [42478] to the 3.9 branch.
Fixes #42720 for 3.9.

Built from https://develop.svn.wordpress.org/branches/3.9@42487


git-svn-id: http://core.svn.wordpress.org/branches/3.9@42316 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2018-01-16 08:15:17 +00:00
Dion Hulse 046ba97ee5 Upgrade: When deleting old files, if deletion fails attempt to empty the file instead. 
Props joemcgill, dd32.
Merges [42434] to the 3.9 branch.
Fixes #42963 for 3.9.

Built from https://develop.svn.wordpress.org/branches/3.9@42475


git-svn-id: http://core.svn.wordpress.org/branches/3.9@42304 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2018-01-16 06:59:15 +00:00
John Blackbourn 62423cc81f Bump 3.9 branch to version 3.9.22. 
Built from https://develop.svn.wordpress.org/branches/3.9@42326


git-svn-id: http://core.svn.wordpress.org/branches/3.9@42155 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-11-29 19:04:15 +00:00
John Blackbourn d8e9c02011 Hardening: Use a properly generated hash for the `newbloguser` key instead of a determinate substring. 
Merges [42258] to the 3.9 branch.

Built from https://develop.svn.wordpress.org/branches/3.9@42304


git-svn-id: http://core.svn.wordpress.org/branches/3.9@42133 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-11-29 16:40:50 +00:00
Gary Pendergast 76ec03176d Bump 3.9 branch to version 3.9.21. 
Built from https://develop.svn.wordpress.org/branches/3.9@42078


git-svn-id: http://core.svn.wordpress.org/branches/3.9@41907 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-10-31 13:45:15 +00:00
Dominik Schilling ee47cb6d42 Users: Use correct escaping function for URLs. 
Merge of [41522] to the 3.9 branch.

Built from https://develop.svn.wordpress.org/branches/3.9@41532


git-svn-id: http://core.svn.wordpress.org/branches/3.9@41365 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-09-19 21:40:14 +00:00
Aaron Campbell 79224df81a Bump 3.9 branch to version 3.9.20. 
Built from https://develop.svn.wordpress.org/branches/3.9@41519


git-svn-id: http://core.svn.wordpress.org/branches/3.9@41352 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-09-19 20:13:15 +00:00
John Blackbourn f5db1e4375 Filesystem API: Ensure filenames are valid before attempting to unzip them to ensure malformed file paths don't cause issues. 
Merges [41457] to the 3.9 branch.

Built from https://develop.svn.wordpress.org/branches/3.9@41467


git-svn-id: http://core.svn.wordpress.org/branches/3.9@41300 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-09-19 14:45:15 +00:00
John Blackbourn d46699267b General: Add missing URL-encoding and add extra hardening to plugin and template names when they're displayed in the admin area. 
Merges [41434] with changes to the 3.9 branch.

See #13377

Built from https://develop.svn.wordpress.org/branches/3.9@41449


git-svn-id: http://core.svn.wordpress.org/branches/3.9@41282 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-09-19 13:44:15 +00:00
Dominik Schilling 0237d2915a Users: Provide a fallback for incorrect HTTP referrers. 
Merge of [41398] to the 3.9 branch.

Built from https://develop.svn.wordpress.org/branches/3.9@41426


git-svn-id: http://core.svn.wordpress.org/branches/3.9@41259 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-09-19 11:15:31 +00:00
Aaron Campbell 66aaaa6aa8 Bump 3.9 branch to version 3.9.19. 
Built from https://develop.svn.wordpress.org/branches/3.9@40756


git-svn-id: http://core.svn.wordpress.org/branches/3.9@40614 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-05-16 21:53:55 +00:00
Aaron Campbell 700dd168fd Add nonce for updating file system credentials. 
Merges [40723] to 3.9 branch.

Built from https://develop.svn.wordpress.org/branches/3.9@40732


git-svn-id: http://core.svn.wordpress.org/branches/3.9@40590 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-05-16 14:57:32 +00:00
Dominik Schilling 9febffc6f7 Customize: Ignore invalid customization sessions. 
Merge of [40704] to the 3.9 branch.
Built from https://develop.svn.wordpress.org/branches/3.9@40713


git-svn-id: http://core.svn.wordpress.org/branches/3.9@40576 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-05-16 12:21:15 +00:00
Pascal Birchler 063e974bd7 Bump 3.9 branch to version 3.9.18. 
Built from https://develop.svn.wordpress.org/branches/3.9@40495


git-svn-id: http://core.svn.wordpress.org/branches/3.9@40371 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-04-20 16:28:15 +00:00
Pascal Birchler a05429ecd1 Fix broken audio/video functions when sanitizing ID3 data 
This fixes a bug where running `wp_kses_post_deep()` on all the ID3
tag data corrupted blob data.

See #40075, #40085.

Merges [40400] to the 3.9 branch.

Built from https://develop.svn.wordpress.org/branches/3.9@40468


git-svn-id: http://core.svn.wordpress.org/branches/3.9@40344 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-04-17 13:34:16 +00:00
James Nylen f2ef35f4a9 Bump 3.9 branch to version 3.9.17. 
Built from https://develop.svn.wordpress.org/branches/3.9@40210


git-svn-id: http://core.svn.wordpress.org/branches/3.9@40149 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-03-06 16:42:15 +00:00
Aaron Campbell fcec9ed6ff Plugins: Add file check to plugin deletions. 
Merges [40169] to 3.9 branch.


Built from https://develop.svn.wordpress.org/branches/3.9@40178


git-svn-id: http://core.svn.wordpress.org/branches/3.9@40117 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-03-06 13:05:15 +00:00
Jeremy Felt ca488f141f Validate video and audio metadata. 
Merge of [40148] to the 3.9 branch.

Built from https://develop.svn.wordpress.org/branches/3.9@40157


git-svn-id: http://core.svn.wordpress.org/branches/3.9@40096 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-03-06 08:12:16 +00:00