WordPress-C
/
WordPress
mirror of https://github.com/WordPress/WordPress.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
27,286 Commits 50 Branches 749 Tags 983 MiB
Commit Graph

13246 Commits

Author SHA1 Message Date
John Blackbourn c2be27457f Hardening: Use a properly generated hash for the `newbloguser` key instead of a determinate substring. 
Merges [42258] to the 4.0 branch.

Built from https://develop.svn.wordpress.org/branches/4.0@42300


git-svn-id: http://core.svn.wordpress.org/branches/4.0@42129 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-11-29 16:38:47 +00:00
Gary Pendergast a9c82ac560 Bump 4.0 branch to version 4.0.20. 
Built from https://develop.svn.wordpress.org/branches/4.0@42077


git-svn-id: http://core.svn.wordpress.org/branches/4.0@41906 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-10-31 13:44:19 +00:00
Dominik Schilling 03aec8b402 Users: Use correct escaping function for URLs. 
Merge of [41522] to the 4.0 branch.

Built from https://develop.svn.wordpress.org/branches/4.0@41531


git-svn-id: http://core.svn.wordpress.org/branches/4.0@41364 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-09-19 21:39:43 +00:00
Aaron Campbell 42af396f21 Bump 4.0 branch to version 4.0.19. 
Built from https://develop.svn.wordpress.org/branches/4.0@41518


git-svn-id: http://core.svn.wordpress.org/branches/4.0@41351 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-09-19 20:10:20 +00:00
John Blackbourn d29f744559 Filesystem API: Ensure filenames are valid before attempting to unzip them to ensure malformed file paths don't cause issues. 
Merges [41457] to the 4.0 branch.

Built from https://develop.svn.wordpress.org/branches/4.0@41466


git-svn-id: http://core.svn.wordpress.org/branches/4.0@41299 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-09-19 14:44:37 +00:00
John Blackbourn 9f5d4f74be General: Add missing URL-encoding and add extra hardening to plugin and template names when they're displayed in the admin area. 
Merges [41434] with changes to the 4.0 branch.

See #13377

Built from https://develop.svn.wordpress.org/branches/4.0@41447


git-svn-id: http://core.svn.wordpress.org/branches/4.0@41280 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-09-19 13:42:20 +00:00
Dominik Schilling ed1fb81c47 Users: Provide a fallback for incorrect HTTP referrers. 
Merge of [41398] to the 4.0 branch.

Built from https://develop.svn.wordpress.org/branches/4.0@41425


git-svn-id: http://core.svn.wordpress.org/branches/4.0@41258 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-09-19 11:15:17 +00:00
Aaron Campbell 395d3d7bfc Bump 4.0 branch to version 4.0.18. 
Built from https://develop.svn.wordpress.org/branches/4.0@40755


git-svn-id: http://core.svn.wordpress.org/branches/4.0@40613 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-05-16 21:53:42 +00:00
Aaron Campbell f27c1f06fe Add nonce for updating file system credentials. 
Merges [40723] to 4.0 branch.

Built from https://develop.svn.wordpress.org/branches/4.0@40731


git-svn-id: http://core.svn.wordpress.org/branches/4.0@40589 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-05-16 14:57:18 +00:00
Dominik Schilling 89a35259c0 Customize: Ignore invalid customization sessions. 
Merge of [40704] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@40712


git-svn-id: http://core.svn.wordpress.org/branches/4.0@40575 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-05-16 12:20:43 +00:00
Pascal Birchler 7b33a67b95 Bump 4.0 branch to version 4.0.17. 
Built from https://develop.svn.wordpress.org/branches/4.0@40494


git-svn-id: http://core.svn.wordpress.org/branches/4.0@40370 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-04-20 16:27:43 +00:00
Pascal Birchler 47b7dedef6 Fix broken audio/video functions when sanitizing ID3 data 
This fixes a bug where running `wp_kses_post_deep()` on all the ID3
tag data corrupted blob data.

See #40075, #40085.

Merges [40400] to the 4.0 branch.

Built from https://develop.svn.wordpress.org/branches/4.0@40467


git-svn-id: http://core.svn.wordpress.org/branches/4.0@40343 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-04-17 13:31:19 +00:00
James Nylen a40fe1c493 Bump 4.0 branch to version 4.0.16. 
Built from https://develop.svn.wordpress.org/branches/4.0@40209


git-svn-id: http://core.svn.wordpress.org/branches/4.0@40148 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-03-06 16:39:19 +00:00
Aaron Campbell acbd361baf Plugins: Add file check to plugin deletions. 
Merges [40169] to 4.0 branch.


Built from https://develop.svn.wordpress.org/branches/4.0@40177


git-svn-id: http://core.svn.wordpress.org/branches/4.0@40116 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-03-06 13:04:19 +00:00
Jeremy Felt 58440ac942 Validate video and audio metadata. 
Merge of [40148] to the 4.0 branch.

Built from https://develop.svn.wordpress.org/branches/4.0@40156


git-svn-id: http://core.svn.wordpress.org/branches/4.0@40095 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-03-06 08:11:19 +00:00
Aaron Campbell 25e87a205e Bump 4.0 branch to version 4.0.15. 
Built from https://develop.svn.wordpress.org/branches/4.0@40003


git-svn-id: http://core.svn.wordpress.org/branches/4.0@39940 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-26 18:28:20 +00:00
John Blackbourn 18c516254c Posts, Post Types: When using Excerpt mode on the Posts list table, ensure the excerpt output matches what was manually entered into the Excerpt field. 
Merges [39956] to the 4.0 branch.

Built from https://develop.svn.wordpress.org/branches/4.0@39986


git-svn-id: http://core.svn.wordpress.org/branches/4.0@39923 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-26 14:19:18 +00:00
Dominik Schilling 6c9f0e2e0f Press This: Do not show Categories & Tags UI for users who cannot assign terms to posts anyways. 
Merge of [39968] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@39978


git-svn-id: http://core.svn.wordpress.org/branches/4.0@39915 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-26 14:14:44 +00:00
Aaron Campbell 39566256f7 Bump 4.0 branch to version 4.0.14. 
Built from https://develop.svn.wordpress.org/branches/4.0@39867


git-svn-id: http://core.svn.wordpress.org/branches/4.0@39804 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-11 16:59:18 +00:00
Dominik Schilling 5fcb58d0cb Updates: Translate plugin data on the Updates screen. 
Merge of [39808] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@39827


git-svn-id: http://core.svn.wordpress.org/branches/4.0@39765 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-11 11:43:08 +00:00
Aaron Campbell 0f8124cdc6 Add nonce for widget accessibility mode. 
Props vortfu.

See #23328.

Merges [39765] to 4.0 branch.

Built from https://develop.svn.wordpress.org/branches/4.0@39768


git-svn-id: http://core.svn.wordpress.org/branches/4.0@39706 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-11 01:51:19 +00:00
Joe McGill e21c149861 Media: Improved media titles when created from filename. 
Preserves spaces and generally creates more accurate, cleaner titles from filenames of uploaded media.

Merge of [38615] to the 4.0 branch.

Fixes #37989.

Built from https://develop.svn.wordpress.org/branches/4.0@39716


git-svn-id: http://core.svn.wordpress.org/branches/4.0@39656 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-06 22:01:43 +00:00
Jeremy Felt b79f440e16 Bump 4.0 branch to 4.0.13. 
Built from https://develop.svn.wordpress.org/branches/4.0@38555


git-svn-id: http://core.svn.wordpress.org/branches/4.0@38498 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2016-09-07 15:01:17 +00:00
Jeremy Felt 8edc8406ec Media: Sanitize upload filename. 
Merge of [38538] to the 4.0 branch.

Built from https://develop.svn.wordpress.org/branches/4.0@38545


git-svn-id: http://core.svn.wordpress.org/branches/4.0@38488 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2016-09-07 14:00:19 +00:00
Pascal Birchler 2ec2662e9e Upgrade/Install: Sanitize file name in `File_Upload_Upgrader`. 
Merge of [38524] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@38531


git-svn-id: http://core.svn.wordpress.org/branches/4.0@38472 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2016-09-06 18:00:20 +00:00
Boone Gorges 7f457eaddd Bump 4.0 branch to 4.0.12. 
Built from https://develop.svn.wordpress.org/branches/4.0@37833


git-svn-id: http://core.svn.wordpress.org/branches/4.0@37798 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2016-06-21 16:42:17 +00:00
Nikolay Bachiyski 8197793447 Admin: escape URL-encoded permalinks 
Merge of [37801] to the 4.0 branch.

Built from https://develop.svn.wordpress.org/branches/4.0@37817


git-svn-id: http://core.svn.wordpress.org/branches/4.0@37782 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2016-06-21 14:57:16 +00:00
Rachel Baker e16790e7e2 Revisions: Change the capability needed to view revision diffs to `edit_post`. 
Merge of [37779] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@37802


git-svn-id: http://core.svn.wordpress.org/branches/4.0@37767 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2016-06-21 14:47:17 +00:00
Boone Gorges 01e2cb3978 Taxonomy: More specific cap check when processing category data on post save. 
Ports [37691] to the 4.0 branch.

Props dlh.
Fixes #36379.
Built from https://develop.svn.wordpress.org/branches/4.0@37782


git-svn-id: http://core.svn.wordpress.org/branches/4.0@37747 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2016-06-21 14:23:16 +00:00
Dominik Schilling d8fcaf9d61 Customize: Make sure that preview and return URLs are URLs. 
Merge of [37527] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@37775


git-svn-id: http://core.svn.wordpress.org/branches/4.0@37740 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2016-06-21 14:21:10 +00:00
Dominik Schilling 7277742a5d Bump 4.0 branch to 4.0.11. 
Built from https://develop.svn.wordpress.org/branches/4.0@37389


git-svn-id: http://core.svn.wordpress.org/branches/4.0@37355 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2016-05-06 18:15:17 +00:00
Jeremy Felt 3291a9819a Multisite: Improve escaping in network settings. 
Merge of [37124] to the 4.0 branch.

Built from https://develop.svn.wordpress.org/branches/4.0@37129


git-svn-id: http://core.svn.wordpress.org/branches/4.0@37096 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2016-03-30 16:05:36 +00:00
Dominik Schilling 869f687c65 Multisite: Validate new email address confirmations. 
Merge of [37103] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@37108


git-svn-id: http://core.svn.wordpress.org/branches/4.0@37075 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2016-03-30 14:51:03 +00:00
Dominik Schilling 20c5220229 Bump 4.0 branch to 4.0.10. 
Built from https://develop.svn.wordpress.org/branches/4.0@36459


git-svn-id: http://core.svn.wordpress.org/branches/4.0@36426 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2016-02-02 17:29:36 +00:00
Dominik Schilling 2fdd2703ed Bump 4.0 branch to 4.0.9. 
Built from https://develop.svn.wordpress.org/branches/4.0@36200


git-svn-id: http://core.svn.wordpress.org/branches/4.0@36167 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2016-01-06 18:50:38 +00:00
Helen Hou-Sandí 2cb538bcd1 Bump 4.0 branch to 4.0.8. 
Built from https://develop.svn.wordpress.org/branches/4.0@34184


git-svn-id: http://core.svn.wordpress.org/branches/4.0@34152 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2015-09-15 14:29:25 +00:00
Dominik Schilling b81cdd60a3 XMLRPC: Don't allow private posts to be sticky. 
Merge of [33325], [33612], and [34135] to the 4.0 branch.

See #20662.
Built from https://develop.svn.wordpress.org/branches/4.0@34154


git-svn-id: http://core.svn.wordpress.org/branches/4.0@34122 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2015-09-14 23:01:37 +00:00
Nikolay Bachiyski 2a0ec142b2 List tables: escape user e-mails 
Merges [34133] for 4.0 branch

Built from https://develop.svn.wordpress.org/branches/4.0@34140


git-svn-id: http://core.svn.wordpress.org/branches/4.0@34108 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2015-09-14 22:43:17 +00:00
Dominik Schilling a782df35d7 Bump 4.0 branch to version 4.0.7. 
Built from https://develop.svn.wordpress.org/branches/4.0@33575


git-svn-id: http://core.svn.wordpress.org/branches/4.0@33542 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2015-08-04 11:52:35 +00:00
Dominik Schilling 53957f2276 Heartbeat: Ensure post locks are released. 
Merge of [33542] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@33545


git-svn-id: http://core.svn.wordpress.org/branches/4.0@33512 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2015-08-04 04:55:53 +00:00
Gary Pendergast b3356b6f77 Bump 4.0 branch to version 4.0.6. 
Built from https://develop.svn.wordpress.org/branches/4.0@33397


git-svn-id: http://core.svn.wordpress.org/branches/4.0@33365 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2015-07-23 11:07:33 +00:00
Gary Pendergast 5d196f2b09 Capabilities: When creating an auto-draft, ensure that the current user still has permission to do so. 
Merge of [33357] to the 4.0 branch.


Built from https://develop.svn.wordpress.org/branches/4.0@33376


git-svn-id: http://core.svn.wordpress.org/branches/4.0@33347 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2015-07-23 04:01:36 +00:00
Dominik Schilling 9e426bbb49 4.0.5 version bumps. 
Built from https://develop.svn.wordpress.org/branches/4.0@32436


git-svn-id: http://core.svn.wordpress.org/branches/4.0@32406 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2015-05-06 23:28:36 +00:00
Michael Adams cfd130d33a Upgrade: `$wpdb->get_col_length()` sanity check: bail on unexpected return value. 
Merges [32429] for the 4.0 branch.

See #32165.

Built from https://develop.svn.wordpress.org/branches/4.0@32432


git-svn-id: http://core.svn.wordpress.org/branches/4.0@32402 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2015-05-06 23:13:58 +00:00
Michael Adams 551057bb68 Upgrade: Ensure unintelligible DB schemas don't result in content loss. 
Merge of [32417] to the 4.0 branch.

See #32165.

Props ocean90.

Built from https://develop.svn.wordpress.org/branches/4.0@32420


git-svn-id: http://core.svn.wordpress.org/branches/4.0@32390 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2015-05-06 21:52:03 +00:00
Aaron Jorbin a820c920f9 When upgrading WordPress remove genericons example.html files 
[32385] for 4.0 branch

Props @dd32, @boonebgorges, @johnjamesjacoby, @drewapicture, @jorbin


Built from https://develop.svn.wordpress.org/branches/4.0@32404


git-svn-id: http://core.svn.wordpress.org/branches/4.0@32374 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2015-05-06 20:05:33 +00:00
Michael Adams 7e35f92679 WPDB: When checking that a string can be sent to MySQL, we shouldn't use `mb_convert_encoding()`, as it behaves differently to MySQL's character encoding conversion. 
Merge of [32364] to the 4.0 branch.

Props mdawaffe, pento, nbachiyski, jorbin, johnjamesjacoby, jeremyfelt.

See #32165.

Built from https://develop.svn.wordpress.org/branches/4.0@32388


git-svn-id: http://core.svn.wordpress.org/branches/4.0@32358 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2015-05-06 19:09:39 +00:00
Gary Pendergast 4fe0310d7a 4.0: 
- WPDB: Sanity check that any strings being stored in the DB are not too long to store correctly.
- When upgrading, remove any suspicious comments.


Built from https://develop.svn.wordpress.org/branches/4.0@32313


git-svn-id: http://core.svn.wordpress.org/branches/4.0@32284 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2015-04-27 17:17:37 +00:00
Helen Hou-Sandí 8254664893 The 4.0 branch is now 4.0.3. 
Built from https://develop.svn.wordpress.org/branches/4.0@32283


git-svn-id: http://core.svn.wordpress.org/branches/4.0@32254 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2015-04-23 21:35:37 +00:00
Gary Pendergast 7c0efb9bd2 4.0: Update about.php. 
Built from https://develop.svn.wordpress.org/branches/4.0@32218


git-svn-id: http://core.svn.wordpress.org/branches/4.0@32192 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2015-04-20 17:39:35 +00:00