WordPress-C
/
WordPress
mirror of https://github.com/WordPress/WordPress.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
17,893 Commits 50 Branches 749 Tags 981 MiB
Commit Graph

302 Commits

Author SHA1 Message Date
ryan 3eaf083995 Introduce sanitize_trackback_urls(). Don't ping bad urls. Don't ping bad urls or save them to the DB. Props xknown, SergeyBiryukov. fixes #17560 
git-svn-id: http://svn.automattic.com/wordpress/trunk@19675 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2012-01-04 19:45:13 +00:00
nacin 2ba0d300c4 Correct the documentation for balanceTags(). props mdawaffe, fixes #19576. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@19601 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-12-16 20:57:05 +00:00
ryan 07ff8b216b Use one space, not two, after trailing punctuation. fixes #19537 
git-svn-id: http://svn.automattic.com/wordpress/trunk@19593 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-12-13 23:45:31 +00:00
nacin 524284fd6b Allow 8212/8211 (em dash and en dash) to be translated in wptexturize(). props SergeyBiryukov, fixes #15556. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@19187 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-11-06 18:31:54 +00:00
nacin b2560a3025 Add a few characters to remove_accents(). props SergeyBiryukov. props ampt for [UT471]. fixes #9591. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@19125 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-11-02 23:08:05 +00:00
ryan 91bc97be7b Allow 0 - 9 in tag_escape(). Props sirzooro. fixes #18765 
git-svn-id: http://svn.automattic.com/wordpress/trunk@18955 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-10-12 20:34:14 +00:00
ryan 80351b789d Avoid preg backtrack limit errors with large posts when processing shortcodes. Props mdawaffe. fixes #15600 
git-svn-id: http://svn.automattic.com/wordpress/trunk@18952 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-10-12 16:50:30 +00:00
ryan b3054bd18f phpdoc fix for zeroise(). Props trepmal. fixes #18854 
git-svn-id: http://svn.automattic.com/wordpress/trunk@18877 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-10-04 16:02:33 +00:00
duck_ 4171ea192b Introduce wp_allowed_protocols() for use in wp_kses() and esc_url(). See #18268. 
This allows plugins to filter the list of protocols used for esc_url() too, and helps us keep the list of protocols in sync.


git-svn-id: http://svn.automattic.com/wordpress/trunk@18826 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-09-29 22:33:51 +00:00
markjaquith 33c150d3de Allow the text parameter in wp_trim_excerpt() to be omitted altogether, instead of requiring a blank string. props SergeyBiryukov. fixes #17492 
git-svn-id: http://svn.automattic.com/wordpress/trunk@18824 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-09-29 21:48:03 +00:00
nacin 07567002bb Update esc_url() phpdoc. props sirzooro, fixes #18766. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@18769 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-09-24 19:52:26 +00:00
duck_ 2fb95a133d wp_strip_all_tags() in wp_trim_words() to remove CSS and JS within tags. Props evansolomon. Fixes #18726. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@18742 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-09-21 20:39:21 +00:00
ryan 7aedd7ec52 Run the sanitize_option_* filter for all options in sanitize_option(). Add some sanity checks for the permalink options while in there. fixes #18737 
git-svn-id: http://svn.automattic.com/wordpress/trunk@18738 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-09-21 19:05:06 +00:00
duck_ 8cfc0fa5ec Abstract word-trimming from wp_trim_excerpt() into wp_trim_words(). Props nacin. Fixes #16372. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@18732 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-09-20 17:14:23 +00:00
nacin e5ca4fea40 Strip a number of special characters in sanitize_title_with_dashes on save. Includes quotes (curly, angle), dashes, marks, etc. props SergeyBiryukov. props ampt for the unit tests in [UT438]. see #10797. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@18705 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-09-18 19:53:59 +00:00
duck_ e4ed63fc6f Fix typos in documentation (wp-includes/[a-h]). See #18560. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@18633 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-09-03 16:02:41 +00:00
nacin d5cf830175 Add 'q' tag to nestable tags list in force_balance_tags(). props solarissmoke, fixes #6870. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@18585 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-08-23 15:37:38 +00:00
ryan 6c39a6f769 Better double encoding handling in _wp_special_chars(). Props miqrogroove. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@18485 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-07-29 20:43:45 +00:00
ryan 55d7366c42 Recognize urls that start with a question mark as relative urls that do not require a scheme to be prepended. fixes #18260 
git-svn-id: http://svn.automattic.com/wordpress/trunk@18469 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-07-26 19:44:18 +00:00
westi 009b264271 Make [18456] more obvious. Fixes #16432. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@18465 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-07-25 13:20:07 +00:00
nacin 6185986c0e Add pre_ent2ncr filter. props GaryJ, fixes #16432. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@18456 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-07-21 21:41:21 +00:00
ryan 593659b8d0 Hardening. Santizers for WPLANG and new_admin_email. Prevent stomping ID and filter. Validate locale filename. Props westi. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@18346 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-06-27 15:56:42 +00:00
ryan bc667be71b Allow plus '+' character when sanitizing mime type. Props cyberhobo. fixes #17855 
git-svn-id: http://svn.automattic.com/wordpress/trunk@18324 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-06-20 20:05:57 +00:00
westi fda24a53ed Ensure we have a valid timezone identifier before trying to use it. 
Validate the new timezone identifier during option update.
Fixes #17840.

git-svn-id: http://svn.automattic.com/wordpress/trunk@18323 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-06-20 14:58:50 +00:00
azaozz ae81d75d39 Fix typo in remove_accents(), props scribu, fixes #16232 
git-svn-id: http://svn.automattic.com/wordpress/trunk@18159 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-06-06 02:22:50 +00:00
ryan 4da684cf9a Update @since 
git-svn-id: http://svn.automattic.com/wordpress/trunk@18032 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-05-25 15:47:17 +00:00
ryan 81a5f821fb Sanitize guid on save and display. Sanitize mime type on save. Don't allow changing mime type via edit form handlers. Protect hidden meta. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@17994 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-05-22 23:19:42 +00:00
ryan 569c17df7f Properly anchor mime preg. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@17990 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-05-22 23:17:09 +00:00
nacin 98bd4c0b2f s/coma/comma/. props ocean90. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@17982 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-05-21 15:20:25 +00:00
ryan b2c2e302be Revert part of [17920]. Support for empty tz must remain. Props johnjamesjacoby. fixes #17448 
git-svn-id: http://svn.automattic.com/wordpress/trunk@17958 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-05-18 18:56:42 +00:00
westi 65e341d0cb Fix typos and inconsistencies in PHPdoc / function declarations. See #17414 props duck_ 
git-svn-id: http://svn.automattic.com/wordpress/trunk@17925 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-05-14 09:50:20 +00:00
ryan 58767691f4 Remove PHP5 back compat code from get_gmt_from_date. Props technosailor. fixes #16920 
git-svn-id: http://svn.automattic.com/wordpress/trunk@17920 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-05-13 19:17:07 +00:00
ryan 74354459f1 Performance improvements for wptexturize(). Props solarissmoke, hakre. fixes #16684 
git-svn-id: http://svn.automattic.com/wordpress/trunk@17636 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-04-13 17:11:35 +00:00
nacin 14ec951269 Make underscores valid in sanitize_html_class. fixes #17067. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@17614 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-04-06 21:28:52 +00:00
ryan 975a6a8c8d Reduce backtracking in make_clickable() regex. Reduce pcre.recursion_limit to avoid segfaulting. Props hakre. For trunk. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@17570 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-03-28 21:39:16 +00:00
ryan 4d46e8d95e Lose create_function() in links_add_target() and links_add_base_url(). esc_attr() the target to provide extra coverage for plugins. Props Justin Rainbow, nacin. For trunk 
git-svn-id: http://svn.automattic.com/wordpress/trunk@17459 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-02-16 19:24:18 +00:00
ryan 85f1feed84 Bring out the shears. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@17228 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2011-01-06 04:11:14 +00:00
ryan 81cd855720 Don't be case sensitive to attribute names. Handle padded entities when checking for bad protocols. Normalize entities before checking for bad protocols in esc_url(). Props Mauro Gentile, duck_, miqrogroove 
git-svn-id: http://svn.automattic.com/wordpress/trunk@17171 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2010-12-29 20:45:37 +00:00
nacin 95726df854 Revert [16995] due to the way the data enters the db. props garyc40, see #15454. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@17142 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2010-12-25 18:10:59 +00:00
ryan 3a66c698ee Remove some unnecessary esc_textarea() calls. Props garyc40. see #15454 
git-svn-id: http://svn.automattic.com/wordpress/trunk@17001 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2010-12-16 17:48:20 +00:00
markjaquith 49c11dc768 Use ENT_QUOTES in esc_textarea() in case someone uses it in a value='' situation by accident. see #15454 
git-svn-id: http://svn.automattic.com/wordpress/trunk@16993 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2010-12-16 09:24:22 +00:00
westi 60aa1d3062 Ultimate make_clickable. Fixes #14993 props filosofo 
git-svn-id: http://svn.automattic.com/wordpress/trunk@16948 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2010-12-15 13:43:30 +00:00
westi 1df7f1be64 Revert [16279] - the recursive nature of this regex doesn't play well with stack space. See #14993 
git-svn-id: http://svn.automattic.com/wordpress/trunk@16692 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2010-12-02 17:26:06 +00:00
nacin b8ce0261df More param fixes, props duck_. see #14783. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@16469 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2010-11-18 19:12:48 +00:00
ryan 847499e531 Pinking shears 
git-svn-id: http://svn.automattic.com/wordpress/trunk@16438 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2010-11-17 18:47:34 +00:00
markjaquith 6482610f9a esc_textarea() and application for obvious textarea escaping. props alexkingorg. fixes #15454 
git-svn-id: http://svn.automattic.com/wordpress/trunk@16431 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2010-11-17 17:12:01 +00:00
nacin 3f5b442306 Revert changes to wptexturize() until test cases pass. Reverts [16280], [16378]. see #4539 and #15241. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@16409 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2010-11-16 22:18:48 +00:00
westi 17d25e2cdc Fix regression in wptexturize with single quotes when used for contraction. See #15241 props norbertm. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@16378 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2010-11-15 08:52:36 +00:00
nacin 81a8f2d3ce Use square brackets instead of braces for string access. props hakre, fixes #13900. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@16340 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2010-11-13 09:53:55 +00:00
nacin 5f4a583fb1 Remove more create_function calls. props huichen, see #14424. 
git-svn-id: http://svn.automattic.com/wordpress/trunk@16313 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2010-11-11 22:50:36 +00:00