Aaron Campbell
f27c1f06fe
Add nonce for updating file system credentials.
...
Merges [40723] to 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@40731
git-svn-id: http://core.svn.wordpress.org/branches/4.0@40589 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-05-16 14:57:18 +00:00
Pascal Birchler
47b7dedef6
Fix broken audio/video functions when sanitizing ID3 data
...
This fixes a bug where running `wp_kses_post_deep()` on all the ID3
tag data corrupted blob data.
See #40075 , #40085 .
Merges [40400] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@40467
git-svn-id: http://core.svn.wordpress.org/branches/4.0@40343 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-04-17 13:31:19 +00:00
Jeremy Felt
58440ac942
Validate video and audio metadata.
...
Merge of [40148] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@40156
git-svn-id: http://core.svn.wordpress.org/branches/4.0@40095 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-03-06 08:11:19 +00:00
John Blackbourn
18c516254c
Posts, Post Types: When using Excerpt mode on the Posts list table, ensure the excerpt output matches what was manually entered into the Excerpt field.
...
Merges [39956] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@39986
git-svn-id: http://core.svn.wordpress.org/branches/4.0@39923 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-26 14:19:18 +00:00
Aaron Campbell
0f8124cdc6
Add nonce for widget accessibility mode.
...
Props vortfu.
See #23328 .
Merges [39765] to 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@39768
git-svn-id: http://core.svn.wordpress.org/branches/4.0@39706 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-11 01:51:19 +00:00
Joe McGill
e21c149861
Media: Improved media titles when created from filename.
...
Preserves spaces and generally creates more accurate, cleaner titles from filenames of uploaded media.
Merge of [38615] to the 4.0 branch.
Fixes #37989 .
Built from https://develop.svn.wordpress.org/branches/4.0@39716
git-svn-id: http://core.svn.wordpress.org/branches/4.0@39656 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-06 22:01:43 +00:00
Jeremy Felt
8edc8406ec
Media: Sanitize upload filename.
...
Merge of [38538] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@38545
git-svn-id: http://core.svn.wordpress.org/branches/4.0@38488 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-09-07 14:00:19 +00:00
Pascal Birchler
2ec2662e9e
Upgrade/Install: Sanitize file name in `File_Upload_Upgrader`.
...
Merge of [38524] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@38531
git-svn-id: http://core.svn.wordpress.org/branches/4.0@38472 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-09-06 18:00:20 +00:00
Nikolay Bachiyski
8197793447
Admin: escape URL-encoded permalinks
...
Merge of [37801] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@37817
git-svn-id: http://core.svn.wordpress.org/branches/4.0@37782 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 14:57:16 +00:00
Rachel Baker
e16790e7e2
Revisions: Change the capability needed to view revision diffs to `edit_post`.
...
Merge of [37779] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@37802
git-svn-id: http://core.svn.wordpress.org/branches/4.0@37767 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 14:47:17 +00:00
Boone Gorges
01e2cb3978
Taxonomy: More specific cap check when processing category data on post save.
...
Ports [37691] to the 4.0 branch.
Props dlh.
Fixes #36379 .
Built from https://develop.svn.wordpress.org/branches/4.0@37782
git-svn-id: http://core.svn.wordpress.org/branches/4.0@37747 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 14:23:16 +00:00
Dominik Schilling
b81cdd60a3
XMLRPC: Don't allow private posts to be sticky.
...
Merge of [33325], [33612], and [34135] to the 4.0 branch.
See #20662 .
Built from https://develop.svn.wordpress.org/branches/4.0@34154
git-svn-id: http://core.svn.wordpress.org/branches/4.0@34122 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-09-14 23:01:37 +00:00
Nikolay Bachiyski
2a0ec142b2
List tables: escape user e-mails
...
Merges [34133] for 4.0 branch
Built from https://develop.svn.wordpress.org/branches/4.0@34140
git-svn-id: http://core.svn.wordpress.org/branches/4.0@34108 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-09-14 22:43:17 +00:00
Dominik Schilling
53957f2276
Heartbeat: Ensure post locks are released.
...
Merge of [33542] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@33545
git-svn-id: http://core.svn.wordpress.org/branches/4.0@33512 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-08-04 04:55:53 +00:00
Gary Pendergast
5d196f2b09
Capabilities: When creating an auto-draft, ensure that the current user still has permission to do so.
...
Merge of [33357] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@33376
git-svn-id: http://core.svn.wordpress.org/branches/4.0@33347 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-07-23 04:01:36 +00:00
Michael Adams
cfd130d33a
Upgrade: `$wpdb->get_col_length()` sanity check: bail on unexpected return value.
...
Merges [32429] for the 4.0 branch.
See #32165 .
Built from https://develop.svn.wordpress.org/branches/4.0@32432
git-svn-id: http://core.svn.wordpress.org/branches/4.0@32402 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-05-06 23:13:58 +00:00
Michael Adams
551057bb68
Upgrade: Ensure unintelligible DB schemas don't result in content loss.
...
Merge of [32417] to the 4.0 branch.
See #32165 .
Props ocean90.
Built from https://develop.svn.wordpress.org/branches/4.0@32420
git-svn-id: http://core.svn.wordpress.org/branches/4.0@32390 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-05-06 21:52:03 +00:00
Aaron Jorbin
a820c920f9
When upgrading WordPress remove genericons example.html files
...
[32385] for 4.0 branch
Props @dd32, @boonebgorges, @johnjamesjacoby, @drewapicture, @jorbin
Built from https://develop.svn.wordpress.org/branches/4.0@32404
git-svn-id: http://core.svn.wordpress.org/branches/4.0@32374 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-05-06 20:05:33 +00:00
Michael Adams
7e35f92679
WPDB: When checking that a string can be sent to MySQL, we shouldn't use `mb_convert_encoding()`, as it behaves differently to MySQL's character encoding conversion.
...
Merge of [32364] to the 4.0 branch.
Props mdawaffe, pento, nbachiyski, jorbin, johnjamesjacoby, jeremyfelt.
See #32165 .
Built from https://develop.svn.wordpress.org/branches/4.0@32388
git-svn-id: http://core.svn.wordpress.org/branches/4.0@32358 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-05-06 19:09:39 +00:00
Gary Pendergast
4fe0310d7a
4.0:
...
- WPDB: Sanity check that any strings being stored in the DB are not too long to store correctly.
- When upgrading, remove any suspicious comments.
Built from https://develop.svn.wordpress.org/branches/4.0@32313
git-svn-id: http://core.svn.wordpress.org/branches/4.0@32284 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-04-27 17:17:37 +00:00
Gary Pendergast
26e7a95cf3
Ensure post titles are correctly escaped on the Dashboard. Merge of [32175] to the 4.0 branch.
...
Props helen, ocean90, dd32, pento.
Built from https://develop.svn.wordpress.org/branches/4.0@32203
git-svn-id: http://core.svn.wordpress.org/branches/4.0@32176 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-04-20 13:36:34 +00:00
Gary Pendergast
548201e950
Merge the query sanity checks from #21212 to the 4.0 branch.
...
Props pento, nacin, mdawaffe, DrewAPicture.
Built from https://develop.svn.wordpress.org/branches/4.0@32181
git-svn-id: http://core.svn.wordpress.org/branches/4.0@32154 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-04-20 10:54:40 +00:00
Andrew Nacin
6e658f81cf
Validate image data.
...
Merges [30458] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@30462
git-svn-id: http://core.svn.wordpress.org/branches/4.0@30453 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2014-11-20 15:53:38 +00:00
Andrew Nacin
8e04e41e42
Revert [28948] for the 4.0 branch, which caused a regression.
...
see #29573 for 4.0. see #28350 .
Built from https://develop.svn.wordpress.org/branches/4.0@30410
git-svn-id: http://core.svn.wordpress.org/branches/4.0@30405 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2014-11-20 11:12:37 +00:00
Andrew Nacin
aaec5126c6
Plugin search: Wrap results in a form to fix pagination's `paged` input field.
...
Merges [29829] to the 4.0 branch.
props jesin, ocean90.
fixes #18724 .
Built from https://develop.svn.wordpress.org/branches/4.0@30249
git-svn-id: http://core.svn.wordpress.org/branches/4.0@30249 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2014-11-06 07:01:34 +00:00
Andrew Nacin
f7392ef917
Pinking shears.
...
Built from https://develop.svn.wordpress.org/trunk@29707
git-svn-id: http://core.svn.wordpress.org/trunk@29481 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2014-09-04 15:23:16 +00:00
Andrew Nacin
00fac0639d
Link to apps.wordpress.org instead of wordpress.org/mobile.
...
props pento.
fixes #29496 .
Built from https://develop.svn.wordpress.org/trunk@29703
git-svn-id: http://core.svn.wordpress.org/trunk@29477 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2014-09-04 14:22:15 +00:00
Sergey Biryukov
2ff943b7b0
Restore the post type's view_item label for preview links that don't submit the changes.
...
fixes #28350 .
Built from https://develop.svn.wordpress.org/trunk@29695
git-svn-id: http://core.svn.wordpress.org/trunk@29470 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2014-09-03 11:33:16 +00:00
Dominik Schilling
de59e21b62
Language Pack Upgrader: Allow to disable asynchronously translation updates.
...
* Don't touch VCS installs.
* Use the `async_update_translation` filter (which corresponds exactly to `auto_update_translation`) to entirely disable it, or based on the update offer.
props nacin, ocean90.
fixes #28571 .
Built from https://develop.svn.wordpress.org/trunk@29694
git-svn-id: http://core.svn.wordpress.org/trunk@29469 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2014-09-03 10:38:17 +00:00
Andrew Nacin
8a9186b878
Media Library: Fix media trash handling.
...
props ocean90, obenland.
fixes #29469 .
Built from https://develop.svn.wordpress.org/trunk@29690
git-svn-id: http://core.svn.wordpress.org/trunk@29465 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2014-09-03 06:47:16 +00:00
Dion Hulse
e8f6320bb4
Language Pack Upgrader: Remove ALL pre-existing filters before performing a translation update these filters may act in an unexpected way during the upgrade process.
...
See #29230 . Fixes #29425 .
Built from https://develop.svn.wordpress.org/trunk@29685
git-svn-id: http://core.svn.wordpress.org/trunk@29460 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2014-09-03 05:38:14 +00:00
Andrew Nacin
4080e96339
Ensure oEmbed previews listen to [embed] width/height attributes.
...
props azaozz.
fixes #29474 .
Built from https://develop.svn.wordpress.org/trunk@29681
git-svn-id: http://core.svn.wordpress.org/trunk@29456 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2014-09-03 00:40:16 +00:00
Helen Hou-Sandí
433210a907
Plugin install: Better styling to accommodate plugin icons.
...
fixes #29466 .
Built from https://develop.svn.wordpress.org/trunk@29679
git-svn-id: http://core.svn.wordpress.org/trunk@29454 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2014-09-02 19:47:16 +00:00
Dominik Schilling
c6af00d8b0
Language Pack Upgrader: Check return value before accessing the first array key.
...
Prevents a fatal error when Language_Pack_Upgrader::bulk_upgrade() returns a WP_Error object.
fixes #29470 .
Built from https://develop.svn.wordpress.org/trunk@29675
git-svn-id: http://core.svn.wordpress.org/trunk@29450 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2014-09-02 18:28:17 +00:00
Dominik Schilling
81d600dcca
Install: Only show the language chooser when we have access to the filesystem without asking for credentials.
...
fixes #29397 .
Built from https://develop.svn.wordpress.org/trunk@29673
git-svn-id: http://core.svn.wordpress.org/trunk@29448 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2014-09-02 18:07:18 +00:00
Sergey Biryukov
5faf09a261
Restore 'insert-media-button' as an ID attribute for the first instance of media_buttons(). Remove IDs for subsequent instances.
...
props nacin.
fixes #28090 .
Built from https://develop.svn.wordpress.org/trunk@29671
git-svn-id: http://core.svn.wordpress.org/trunk@29445 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2014-09-02 09:08:16 +00:00
Andrew Nacin
683238567d
Plugin install: The sort callback doesn't need to be public.
...
props helen.
fixes #28673 .
Built from https://develop.svn.wordpress.org/trunk@29666
git-svn-id: http://core.svn.wordpress.org/trunk@29440 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2014-09-02 06:51:16 +00:00
Helen Hou-Sandí
b80c5d3e51
Comments: Simplify JS for inline edit and reply.
...
fixes #27533 .
Built from https://develop.svn.wordpress.org/trunk@29662
git-svn-id: http://core.svn.wordpress.org/trunk@29436 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2014-09-02 03:57:18 +00:00
Helen Hou-Sandí
6926e9aea6
Media: Translate a string for the search placeholder.
...
props alex-ye.
fixes #29448 .
Built from https://develop.svn.wordpress.org/trunk@29659
git-svn-id: http://core.svn.wordpress.org/trunk@29433 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2014-09-01 19:54:16 +00:00
Helen Hou-Sandí
42afb446db
Media: `views_upload` filter expects an array, not a string.
...
see #28946 .
Built from https://develop.svn.wordpress.org/trunk@29641
git-svn-id: http://core.svn.wordpress.org/trunk@29415 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2014-08-27 03:06:27 +00:00
Andrew Nacin
69204000ca
Adjust [29634] so the Upload Plugin button can be shown. see #29236 .
...
Built from https://develop.svn.wordpress.org/trunk@29637
git-svn-id: http://core.svn.wordpress.org/trunk@29411 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2014-08-27 02:59:16 +00:00
Andrew Nacin
8f6fbcdc52
Plugin installer: Minor adjustments to aid with discovery.
...
fixes #29387 .
Built from https://develop.svn.wordpress.org/trunk@29636
git-svn-id: http://core.svn.wordpress.org/trunk@29410 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2014-08-27 02:53:16 +00:00
Andrew Nacin
ac3dd27737
Plugin/Theme Uploads: New capabilities; unify UIs; ensure compatibility with old filters.
...
Introduce upload_plugins and upload_themes capabilities to allow blocking of plugin and theme uploads, versus the old hacky (and not secure) ways of just hiding UI tabs. These are simply meta capabilities that map to install_plugins and install_themes.
Also:
* Use the same nice design for the plugin upload screen as the theme upload screen.
* Better compatibility for the old install_themes_tabs filter added in [29002]. see #28578 .
* Ensure using the install_plugins_tabs filter to remove the upload tab removes the new button.
* Use 'Add Plugins' instead of 'Install Plugins' to match 'Add Themes'.
fixes #29236 .
Built from https://develop.svn.wordpress.org/trunk@29634
git-svn-id: http://core.svn.wordpress.org/trunk@29408 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2014-08-27 01:32:18 +00:00
Dominik Schilling
a32210ef42
Language Form: The language option for `$wp_local_package` should get the same attributes as the other languages.
...
see #15677 .
Built from https://develop.svn.wordpress.org/trunk@29633
git-svn-id: http://core.svn.wordpress.org/trunk@29407 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2014-08-26 22:27:16 +00:00
Dominik Schilling
d544610681
Language packs: No WPLANG anymore.
...
* The WPLANG constant is no longer needed. Remove define('WPLANG', ''); from wp-config-sample.php. Populate WPLANG option based on the WPLANG constant. When get_option('WPLANG') is an empty string it will override WPLANG.
* Introduce translations_api() which is available to communicate with the translation API. Move translation install related functions to a new file.
* Replace mu_dropdown_languages() with wp_dropdown_languages(). wp_dropdown_languages() is now populated by the translation API.
* Remove wp_install_load_language() and allow load_default_textdomain() to switch a core translation.
fixes #13069 , #15677 , #19760 , #28730 , #29281 .
Built from https://develop.svn.wordpress.org/trunk@29630
git-svn-id: http://core.svn.wordpress.org/trunk@29404 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2014-08-26 19:59:16 +00:00
Helen Hou-Sandí
9e8b9a78ca
Media library: Unify headers between view modes.
...
Includes back compat for `views_upload` links. These look a little awkward, but do not appear to be commonly used. Also prevents the view mode links from being dropped on smaller screens so a user doesn't get "stuck" in the list view.
This is different from other list tables, but aligns well with other uploaded content management screens (themes, plugins).
props pento, helen.
fixes #28946 .
Built from https://develop.svn.wordpress.org/trunk@29625
git-svn-id: http://core.svn.wordpress.org/trunk@29399 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2014-08-26 15:58:15 +00:00
Dominik Schilling
32030a073f
RTL: Fix modal alignments.
...
* Prevent horizontal scrollbars in Chrome.
* URL fields should be always LTR.
* Force the plugin details to be LTR for all screens, see #19778 .
fixes #29352 .
Built from https://develop.svn.wordpress.org/trunk@29623
git-svn-id: http://core.svn.wordpress.org/trunk@29397 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2014-08-26 12:55:16 +00:00
Dominik Schilling
9972b54e62
Theme Upgrader: Set `is_multi` to true when doing bulk upgrades.
...
fixes #29234 .
Built from https://develop.svn.wordpress.org/trunk@29622
git-svn-id: http://core.svn.wordpress.org/trunk@29396 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2014-08-26 09:24:17 +00:00
Dominik Schilling
5a67538b40
Language Pack Upgrader: Remove any pre-existing package checks and then set the new one for translations.
...
fixes #29230 .
Built from https://develop.svn.wordpress.org/trunk@29621
git-svn-id: http://core.svn.wordpress.org/trunk@29395 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2014-08-26 09:20:18 +00:00
Scott Taylor
149346ff6e
MCE View sandboxes:
...
* Use a `MutationObserver` to listen to the `body` class of the parent editor frame.
* In `wpview_media_sandbox_styles()`, only return the MEjs stylesheets.
* In `wp_ajax_parse_media_shortcode()` and `wp_ajax_parse_embed()`, return an object instead of an HTML blob to allow passing `body` and `head` separately
Props avryl, azaozz.
Fixes #29048 .
Built from https://develop.svn.wordpress.org/trunk@29615
git-svn-id: http://core.svn.wordpress.org/trunk@29389 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2014-08-26 04:46:15 +00:00