Nikolay Bachiyski
8197793447
Admin: escape URL-encoded permalinks
...
Merge of [37801] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@37817
git-svn-id: http://core.svn.wordpress.org/branches/4.0@37782 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 14:57:16 +00:00
Rachel Baker
e16790e7e2
Revisions: Change the capability needed to view revision diffs to `edit_post`.
...
Merge of [37779] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@37802
git-svn-id: http://core.svn.wordpress.org/branches/4.0@37767 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 14:47:17 +00:00
Nikolay Bachiyski
4c2ff51802
Admin: Escape attachment name in case it contains special characters
...
Merge of [37774] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@37792
git-svn-id: http://core.svn.wordpress.org/branches/4.0@37757 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 14:27:49 +00:00
Boone Gorges
01e2cb3978
Taxonomy: More specific cap check when processing category data on post save.
...
Ports [37691] to the 4.0 branch.
Props dlh.
Fixes #36379 .
Built from https://develop.svn.wordpress.org/branches/4.0@37782
git-svn-id: http://core.svn.wordpress.org/branches/4.0@37747 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 14:23:16 +00:00
Dominik Schilling
d8fcaf9d61
Customize: Make sure that preview and return URLs are URLs.
...
Merge of [37527] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@37775
git-svn-id: http://core.svn.wordpress.org/branches/4.0@37740 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 14:21:10 +00:00
Jeremy Felt
2a56c9cbff
Admin: Allow for the consistent filtering of `auth_redirect_scheme`
...
Merge of [37651] to the 4.0 branch.
See #37047 .
Built from https://develop.svn.wordpress.org/branches/4.0@37763
git-svn-id: http://core.svn.wordpress.org/branches/4.0@37728 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 14:13:39 +00:00
Dominik Schilling
7277742a5d
Bump 4.0 branch to 4.0.11.
...
Built from https://develop.svn.wordpress.org/branches/4.0@37389
git-svn-id: http://core.svn.wordpress.org/branches/4.0@37355 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-05-06 18:15:17 +00:00
Nikolay Bachiyski
909877540e
External Libraries: Update plupload from upstream
...
Built from https://develop.svn.wordpress.org/branches/4.0@37377
git-svn-id: http://core.svn.wordpress.org/branches/4.0@37343 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-05-06 17:56:30 +00:00
Nikolay Bachiyski
217fe37a0f
Taxonomies: make sure taxonomy functions work correctly with taxonomy names with special characters
...
The codex says that taxonomy names "should only contain lowercase letters and the underscore character", but that's not enforced. It's too late to enforce it, since some plugins haven't been following it and the official phpdoc doesn't mention this restriction.
Merge of [37133] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@37139
git-svn-id: http://core.svn.wordpress.org/branches/4.0@37106 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-03-30 17:36:16 +00:00
Jeremy Felt
3291a9819a
Multisite: Improve escaping in network settings.
...
Merge of [37124] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@37129
git-svn-id: http://core.svn.wordpress.org/branches/4.0@37096 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-03-30 16:05:36 +00:00
Dominik Schilling
84ad22efe9
HTTP: Improve detection of valid IP addresses.
...
Merge of [37115] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@37120
git-svn-id: http://core.svn.wordpress.org/branches/4.0@37087 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-03-30 15:52:49 +00:00
Dominik Schilling
869f687c65
Multisite: Validate new email address confirmations.
...
Merge of [37103] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@37108
git-svn-id: http://core.svn.wordpress.org/branches/4.0@37075 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-03-30 14:51:03 +00:00
Nikolay Bachiyski
8f0764e4ba
Snoopy: use escapeshellarg instead of escapeshellcmd
...
We are escaping arguments, not commands, so we'd better use the semantically correct function, even though they are similar.
Merges [37094] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@37099
git-svn-id: http://core.svn.wordpress.org/branches/4.0@37066 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-03-30 14:11:17 +00:00
Dominik Schilling
20c5220229
Bump 4.0 branch to 4.0.10.
...
Built from https://develop.svn.wordpress.org/branches/4.0@36459
git-svn-id: http://core.svn.wordpress.org/branches/4.0@36426 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-02-02 17:29:36 +00:00
Dominik Schilling
dfc561cd61
Better validation of the URL used in HTTP redirects.
...
Merges [36444] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@36451
git-svn-id: http://core.svn.wordpress.org/branches/4.0@36418 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-02-02 17:01:06 +00:00
Dominik Schilling
90961ce059
HTTP: `0.1.2.3` is not a valid IP.
...
Merges [36435] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@36440
git-svn-id: http://core.svn.wordpress.org/branches/4.0@36407 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-02-02 13:04:58 +00:00
Dominik Schilling
2fdd2703ed
Bump 4.0 branch to 4.0.9.
...
Built from https://develop.svn.wordpress.org/branches/4.0@36200
git-svn-id: http://core.svn.wordpress.org/branches/4.0@36167 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-01-06 18:50:38 +00:00
Aaron Jorbin
126b1f3caf
Theme: Escape error messages
...
[36185] for 4.0 branch
Built from https://develop.svn.wordpress.org/branches/4.0@36190
git-svn-id: http://core.svn.wordpress.org/branches/4.0@36157 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-01-06 17:27:17 +00:00
Dion Hulse
3d3c9ab179
Background Updates: Remove the 7am/7pm background update check.
...
This changeset is a more basic version of [36180], clearing the extra now redundant schedule.
As the functionality for this was introduced in 3.9, [28129] has been backported to 3.7/3.8, allowing the API TTL to be respected by those versions.
See #27772 .
Fixes #35323 .
Built from https://develop.svn.wordpress.org/trunk@36184
git-svn-id: http://core.svn.wordpress.org/branches/4.0@36151 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-01-06 13:24:33 +00:00
Dion Hulse
c84e59ec6d
Update Akismet externals
...
git-svn-id: http://core.svn.wordpress.org/branches/4.0@35107 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-10-13 17:19:01 +00:00
Helen Hou-Sandí
7fd9eac86a
Finish bumping the 4.0 branch to 4.0.8.
...
Built from https://develop.svn.wordpress.org/branches/4.0@34193
git-svn-id: http://core.svn.wordpress.org/branches/4.0@34161 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-09-15 14:51:53 +00:00
Helen Hou-Sandí
2cb538bcd1
Bump 4.0 branch to 4.0.8.
...
Built from https://develop.svn.wordpress.org/branches/4.0@34184
git-svn-id: http://core.svn.wordpress.org/branches/4.0@34152 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-09-15 14:29:25 +00:00
Dominik Schilling
b81cdd60a3
XMLRPC: Don't allow private posts to be sticky.
...
Merge of [33325], [33612], and [34135] to the 4.0 branch.
See #20662 .
Built from https://develop.svn.wordpress.org/branches/4.0@34154
git-svn-id: http://core.svn.wordpress.org/branches/4.0@34122 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-09-14 23:01:37 +00:00
Nikolay Bachiyski
536f3b6517
Shortcodes: don't allow unclosed HTML elements in attributes
...
Merges [34134] for 4.0 branch
Built from https://develop.svn.wordpress.org/branches/4.0@34147
git-svn-id: http://core.svn.wordpress.org/branches/4.0@34115 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-09-14 22:49:17 +00:00
Nikolay Bachiyski
2a0ec142b2
List tables: escape user e-mails
...
Merges [34133] for 4.0 branch
Built from https://develop.svn.wordpress.org/branches/4.0@34140
git-svn-id: http://core.svn.wordpress.org/branches/4.0@34108 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-09-14 22:43:17 +00:00
Gary Pendergast
21c8cc7e5a
WPDB: `get_table_from_query()` didn't find table names with hyphens in them.
...
Merge of [33718] to the 4.0 branch.
Props dustinbolton, pento.
See #33470 .
Built from https://develop.svn.wordpress.org/branches/4.0@33994
git-svn-id: http://core.svn.wordpress.org/branches/4.0@33963 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-09-10 07:05:17 +00:00
Gary Pendergast
4379874534
Capabilities: Fall back to the `edit_posts` capability for orphaned comments.
...
Merge of the `capabilities.php` part of [33614] to the 4.0 branch.
Props pento, dd32.
See #33154 .
Built from https://develop.svn.wordpress.org/branches/4.0@33974
git-svn-id: http://core.svn.wordpress.org/branches/4.0@33943 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-09-09 06:10:38 +00:00
Dominik Schilling
a782df35d7
Bump 4.0 branch to version 4.0.7.
...
Built from https://develop.svn.wordpress.org/branches/4.0@33575
git-svn-id: http://core.svn.wordpress.org/branches/4.0@33542 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-08-04 11:52:35 +00:00
Dion Hulse
b5a80e84fe
Fix `do_shortcode('<[shortcode]')` edge case.
...
Props miqrogroove.
Merges [33499] to the 4.0 branch.
See #33116 .
Built from https://develop.svn.wordpress.org/branches/4.0@33565
git-svn-id: http://core.svn.wordpress.org/branches/4.0@33532 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-08-04 07:18:33 +00:00
Dominik Schilling
e8797fc7d0
Comments: IDs are integers.
...
Merge of [33555] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@33558
git-svn-id: http://core.svn.wordpress.org/branches/4.0@33525 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-08-04 04:59:53 +00:00
Dominik Schilling
acd70d39a4
Themes: Fix some broken links in the legacy theme preview.
...
Merge of [33549] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@33551
git-svn-id: http://core.svn.wordpress.org/branches/4.0@33518 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-08-04 04:57:43 +00:00
Dominik Schilling
53957f2276
Heartbeat: Ensure post locks are released.
...
Merge of [33542] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@33545
git-svn-id: http://core.svn.wordpress.org/branches/4.0@33512 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-08-04 04:55:53 +00:00
Dominik Schilling
9e21a4aaf5
Customizer: Use `hash_equals()` for widgets.
...
Merge of [33535] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@33538
git-svn-id: http://core.svn.wordpress.org/branches/4.0@33505 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-08-04 04:53:08 +00:00
Dominik Schilling
30df27a0c7
Nav menus: Consistent titles in widgets.
...
Merge of [33529] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@33531
git-svn-id: http://core.svn.wordpress.org/branches/4.0@33498 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-08-03 20:58:37 +00:00
Andrew Ozz
5b23ca5d93
Backport r33469 and r33470 to 4.0.
...
See #33106 .
Built from https://develop.svn.wordpress.org/branches/4.0@33522
git-svn-id: http://core.svn.wordpress.org/branches/4.0@33489 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-07-31 01:44:36 +00:00
Gary Pendergast
b3356b6f77
Bump 4.0 branch to version 4.0.6.
...
Built from https://develop.svn.wordpress.org/branches/4.0@33397
git-svn-id: http://core.svn.wordpress.org/branches/4.0@33365 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-07-23 11:07:33 +00:00
Gary Pendergast
60eb789f93
Shortcodes: Improve the reliablity of shortcodes inside HTML tags.
...
Merge of [33359] to the 4.0 branch.
Props miqrogroove.
See #15694 .
Built from https://develop.svn.wordpress.org/branches/4.0@33381
git-svn-id: http://core.svn.wordpress.org/branches/4.0@33352 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-07-23 04:50:37 +00:00
Gary Pendergast
5d196f2b09
Capabilities: When creating an auto-draft, ensure that the current user still has permission to do so.
...
Merge of [33357] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@33376
git-svn-id: http://core.svn.wordpress.org/branches/4.0@33347 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-07-23 04:01:36 +00:00
Dominik Schilling
9e426bbb49
4.0.5 version bumps.
...
Built from https://develop.svn.wordpress.org/branches/4.0@32436
git-svn-id: http://core.svn.wordpress.org/branches/4.0@32406 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-05-06 23:28:36 +00:00
Michael Adams
cfd130d33a
Upgrade: `$wpdb->get_col_length()` sanity check: bail on unexpected return value.
...
Merges [32429] for the 4.0 branch.
See #32165 .
Built from https://develop.svn.wordpress.org/branches/4.0@32432
git-svn-id: http://core.svn.wordpress.org/branches/4.0@32402 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-05-06 23:13:58 +00:00
Michael Adams
551057bb68
Upgrade: Ensure unintelligible DB schemas don't result in content loss.
...
Merge of [32417] to the 4.0 branch.
See #32165 .
Props ocean90.
Built from https://develop.svn.wordpress.org/branches/4.0@32420
git-svn-id: http://core.svn.wordpress.org/branches/4.0@32390 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-05-06 21:52:03 +00:00
John Blackbourn
6dbcbfae60
WPDB: Allow queries to reference tables in the dbname.tablename format, and allow table names to contain any valid character, rather than just ASCII.
...
Merge of [32368] to the 4.0 branch.
Props pento, willstedt for the initial patch.
See #32090 .
Built from https://develop.svn.wordpress.org/branches/4.0@32413
git-svn-id: http://core.svn.wordpress.org/branches/4.0@32383 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-05-06 21:04:34 +00:00
Aaron Jorbin
a820c920f9
When upgrading WordPress remove genericons example.html files
...
[32385] for 4.0 branch
Props @dd32, @boonebgorges, @johnjamesjacoby, @drewapicture, @jorbin
Built from https://develop.svn.wordpress.org/branches/4.0@32404
git-svn-id: http://core.svn.wordpress.org/branches/4.0@32374 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-05-06 20:05:33 +00:00
Dominik Schilling
c9168e3a54
WPDB: When sanity checking query character sets, there's no need to check queries that don't return user data.
...
Merges [32374] to the 4.0 branch.
props pento.
see #32104 .
Built from https://develop.svn.wordpress.org/branches/4.0@32403
git-svn-id: http://core.svn.wordpress.org/branches/4.0@32373 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-05-06 20:04:38 +00:00
Helen Hou-Sandí
69de48fd72
The UTF-8 regex can occasionally fail on very low memory machines. Reduce the amount of memory it uses.
...
Merges [32375] to the 4.0 branch.
props pento.
See #32204 .
Built from https://develop.svn.wordpress.org/branches/4.0@32397
git-svn-id: http://core.svn.wordpress.org/branches/4.0@32367 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-05-06 19:43:37 +00:00
Michael Adams
7e35f92679
WPDB: When checking that a string can be sent to MySQL, we shouldn't use `mb_convert_encoding()`, as it behaves differently to MySQL's character encoding conversion.
...
Merge of [32364] to the 4.0 branch.
Props mdawaffe, pento, nbachiyski, jorbin, johnjamesjacoby, jeremyfelt.
See #32165 .
Built from https://develop.svn.wordpress.org/branches/4.0@32388
git-svn-id: http://core.svn.wordpress.org/branches/4.0@32358 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-05-06 19:09:39 +00:00
Andrew Ozz
d6df175451
TinyMCE: work-around a bug in the tags matching regex.
...
For 4.0.
Built from https://develop.svn.wordpress.org/branches/4.0@32372
git-svn-id: http://core.svn.wordpress.org/branches/4.0@32342 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-05-06 05:34:38 +00:00
Gary Pendergast
4fe0310d7a
4.0:
...
- WPDB: Sanity check that any strings being stored in the DB are not too long to store correctly.
- When upgrading, remove any suspicious comments.
Built from https://develop.svn.wordpress.org/branches/4.0@32313
git-svn-id: http://core.svn.wordpress.org/branches/4.0@32284 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-04-27 17:17:37 +00:00
Gary Pendergast
4b6fa85282
4.0 branch is now 4.0.4.
...
Built from https://develop.svn.wordpress.org/branches/4.0@32302
git-svn-id: http://core.svn.wordpress.org/branches/4.0@32273 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-04-27 14:11:37 +00:00
Helen Hou-Sandí
8254664893
The 4.0 branch is now 4.0.3.
...
Built from https://develop.svn.wordpress.org/branches/4.0@32283
git-svn-id: http://core.svn.wordpress.org/branches/4.0@32254 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-04-23 21:35:37 +00:00