Pascal Birchler
c17688406b
Whitelist post arguments in XML-RPC
...
Merges [40677] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@40684
git-svn-id: http://core.svn.wordpress.org/branches/4.1@40547 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-05-16 08:26:26 +00:00
Pascal Birchler
d4a45dc58d
Bump 4.1 branch to version 4.1.17.
...
Built from https://develop.svn.wordpress.org/branches/4.1@40493
git-svn-id: http://core.svn.wordpress.org/branches/4.1@40369 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-04-20 16:27:26 +00:00
Pascal Birchler
d0682377ef
Fix broken audio/video functions when sanitizing ID3 data
...
This fixes a bug where running `wp_kses_post_deep()` on all the ID3
tag data corrupted blob data.
See #40075 , #40085 .
Merges [40400] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@40466
git-svn-id: http://core.svn.wordpress.org/branches/4.1@40342 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-04-17 13:29:25 +00:00
James Nylen
d19df5f1e4
Bump 4.1 branch to version 4.1.16.
...
Built from https://develop.svn.wordpress.org/branches/4.1@40208
git-svn-id: http://core.svn.wordpress.org/branches/4.1@40147 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-03-06 16:35:25 +00:00
Aaron Campbell
0d1be6d9ca
Strip control characters before validating redirect.
...
Merges [40183] to 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@40190
git-svn-id: http://core.svn.wordpress.org/branches/4.1@40129 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-03-06 13:45:27 +00:00
Aaron Campbell
a0922a8e99
Plugins: Add file check to plugin deletions.
...
Merges [40169] to 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@40176
git-svn-id: http://core.svn.wordpress.org/branches/4.1@40115 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-03-06 13:03:54 +00:00
Dominik Schilling
c5c1dce809
Embeds: URL encode YouTube video IDs for broader compatibility.
...
Merge of [40160] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@40167
git-svn-id: http://core.svn.wordpress.org/branches/4.1@40106 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-03-06 12:08:26 +00:00
Jeremy Felt
2702705876
Validate video and audio metadata.
...
Merge of [40148] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@40155
git-svn-id: http://core.svn.wordpress.org/branches/4.1@40094 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-03-06 08:10:27 +00:00
Aaron Campbell
c0abe8d804
Bump 4.1 branch to version 4.1.15.
...
Built from https://develop.svn.wordpress.org/branches/4.1@40002
git-svn-id: http://core.svn.wordpress.org/branches/4.1@39939 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-26 18:26:25 +00:00
John Blackbourn
64094ebb31
Posts, Post Types: When using Excerpt mode on the Posts list table, ensure the excerpt output matches what was manually entered into the Excerpt field.
...
Merges [39956] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@39985
git-svn-id: http://core.svn.wordpress.org/branches/4.1@39922 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-26 14:18:24 +00:00
Dominik Schilling
474af50d38
Press This: Do not show Categories & Tags UI for users who cannot assign terms to posts anyways.
...
Merge of [39968] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@39976
git-svn-id: http://core.svn.wordpress.org/branches/4.1@39913 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-26 14:13:55 +00:00
Dominik Schilling
0a69a201ad
Query: Ensure that queries work correctly with post type names with special characters.
...
Merge of [39952] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@39962
git-svn-id: http://core.svn.wordpress.org/branches/4.1@39899 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-26 13:52:26 +00:00
Aaron Campbell
edd582c69e
Bump 4.1 branch to version 4.1.14.
...
Built from https://develop.svn.wordpress.org/branches/4.1@39866
git-svn-id: http://core.svn.wordpress.org/branches/4.1@39803 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-11 16:58:53 +00:00
Joe McGill
8dd8485f19
Media: Fix exif_imagetype check in wp_get_image_mime
...
This is a follow up to [39831].
Merges [39850] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@39857
git-svn-id: http://core.svn.wordpress.org/branches/4.1@39794 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-11 16:44:24 +00:00
Joe McGill
6fd71daf13
Media: Improve image filetype checking.
...
This adds a new function `wp_get_image_mime()` which is used by
`wp_check_filetype_and_ext()` to validate image files using
`exif_imagetype()` if available instead of `getimagesize()`.
`getimagesize()` is less performant than `exif_imagetype()` and is
dependent on GD. If `exif_imagetype()` is not available, it falls back to
`getimagesize()` as before.
If `wp_check_filetype_and_ext()` can't validate the filetype, we now return
`false` for ext/MIME values.
Merges [39831] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@39838
git-svn-id: http://core.svn.wordpress.org/branches/4.1@39776 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-11 13:18:53 +00:00
Dominik Schilling
4167b5b2cf
Updates: Translate plugin data on the Updates screen.
...
Merge of [39808] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@39826
git-svn-id: http://core.svn.wordpress.org/branches/4.1@39764 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-11 11:42:50 +00:00
Dominik Schilling
cf41259781
Themes: Fix markup for theme name fallbacks.
...
Merge of [39807] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@39815
git-svn-id: http://core.svn.wordpress.org/branches/4.1@39753 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-11 11:12:20 +00:00
Jeremy Felt
335301e8f6
Multisite: Use `wp_rand()` in signup key creation.
...
Merges [39795] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@39802
git-svn-id: http://core.svn.wordpress.org/branches/4.1@39740 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-11 05:35:19 +00:00
Dion Hulse
e68653dd45
Update PHPMailer to 5.2.22.
...
The full list of changes is available here:
https://github.com/PHPMailer/PHPMailer/compare/v5.2.21...v5.2.22
Merges [39759] to the 4.1 branch.
Fixes #37210 for 4.1.
Built from https://develop.svn.wordpress.org/branches/4.1@39790
git-svn-id: http://core.svn.wordpress.org/branches/4.1@39728 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-11 05:25:51 +00:00
Jeremy Felt
dc033d7009
Mail: Disable wp-mail.php when `mailserver_url` is mail.example.com.
...
Merges [39772] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@39779
git-svn-id: http://core.svn.wordpress.org/branches/4.1@39717 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-11 05:19:50 +00:00
Aaron Campbell
be45faec74
Add nonce for widget accessibility mode.
...
Props vortfu.
See #23328 .
Merges [39765] to 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@39767
git-svn-id: http://core.svn.wordpress.org/branches/4.1@39705 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-11 01:50:26 +00:00
Dion Hulse
e754067ae9
Mail: Upgrade PHPMailer to 5.2.21.
...
Merges [39645], [36083], [33142], [33124] to the 4.1 branch.
See #37210 .
Built from https://develop.svn.wordpress.org/branches/4.1@39727
git-svn-id: http://core.svn.wordpress.org/branches/4.1@39667 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-06 22:06:24 +00:00
Joe McGill
9ee6a9ad66
Media: Improved media titles when created from filename.
...
Preserves spaces and generally creates more accurate, cleaner titles from filenames of uploaded media.
Merge of [38615] to the 4.1 branch.
Fixes #37989 .
Built from https://develop.svn.wordpress.org/branches/4.1@39715
git-svn-id: http://core.svn.wordpress.org/branches/4.1@39655 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-06 22:01:26 +00:00
Dion Hulse
dc2355312d
General: Update copyright year to 2017 in license.txt.
...
Props Nikschavan.
Merges [39659] to the 4.1 branch.
Fixes #39433 .
Built from https://develop.svn.wordpress.org/branches/4.1@39703
git-svn-id: http://core.svn.wordpress.org/branches/4.1@39643 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-06 21:35:24 +00:00
Jeremy Felt
9a9ecd5c32
Bump 4.1 branch to 4.1.13.
...
Built from https://develop.svn.wordpress.org/branches/4.1@38554
git-svn-id: http://core.svn.wordpress.org/branches/4.1@38497 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-09-07 15:00:58 +00:00
Jeremy Felt
98ead2d8bb
Media: Sanitize upload filename.
...
Merge of [38538] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@38544
git-svn-id: http://core.svn.wordpress.org/branches/4.1@38487 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-09-07 13:59:54 +00:00
Pascal Birchler
0be5d63999
Upgrade/Install: Sanitize file name in `File_Upload_Upgrader`.
...
Merge of [38524] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@38530
git-svn-id: http://core.svn.wordpress.org/branches/4.1@38471 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-09-06 17:57:23 +00:00
Boone Gorges
3d28255a66
Bump 4.1 branch to 4.1.12.
...
Built from https://develop.svn.wordpress.org/branches/4.1@37832
git-svn-id: http://core.svn.wordpress.org/branches/4.1@37797 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 16:39:24 +00:00
Joe McGill
8bb91d40a2
Media: Improve handling of extensionless filenames.
...
Merge of [37756] to the 4.1 branch.
See #37111 .
Built from https://develop.svn.wordpress.org/branches/4.1@37818
git-svn-id: http://core.svn.wordpress.org/branches/4.1@37783 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 14:57:40 +00:00
Nikolay Bachiyski
7fcd5f5219
Admin: escape URL-encoded permalinks
...
Merge of [37801] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@37815
git-svn-id: http://core.svn.wordpress.org/branches/4.1@37780 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 14:56:22 +00:00
Rachel Baker
7e883711c3
Revisions: Change the capability needed to view revision diffs to `edit_post`.
...
Merge of [37779] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@37800
git-svn-id: http://core.svn.wordpress.org/branches/4.1@37765 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 14:46:22 +00:00
Nikolay Bachiyski
25df9d65a8
Admin: Escape attachment name in case it contains special characters
...
Merge of [37774] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@37790
git-svn-id: http://core.svn.wordpress.org/branches/4.1@37755 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 14:26:33 +00:00
Boone Gorges
79e7b2e6aa
Taxonomy: More specific cap check when processing category data on post save.
...
Ports [37691] to the 4.1 branch.
Props dlh.
Fixes #36379 .
Built from https://develop.svn.wordpress.org/branches/4.1@37781
git-svn-id: http://core.svn.wordpress.org/branches/4.1@37746 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 14:22:56 +00:00
Dominik Schilling
65b88f9802
Customize: Make sure that preview and return URLs are URLs.
...
Merge of [37527] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@37773
git-svn-id: http://core.svn.wordpress.org/branches/4.1@37738 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 14:20:25 +00:00
Jeremy Felt
8d2141b7ee
Admin: Allow for the consistent filtering of `auth_redirect_scheme`
...
Merge of [37651] to the 4.1 branch.
See #37047 .
Built from https://develop.svn.wordpress.org/branches/4.1@37762
git-svn-id: http://core.svn.wordpress.org/branches/4.1@37727 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 14:13:23 +00:00
Dominik Schilling
2dbd645312
Bump 4.1 branch to 4.1.11.
...
Built from https://develop.svn.wordpress.org/branches/4.1@37388
git-svn-id: http://core.svn.wordpress.org/branches/4.1@37354 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-05-06 18:14:22 +00:00
Nikolay Bachiyski
58a1804e9c
External Libraries: Update plupload from upstream
...
Built from https://develop.svn.wordpress.org/branches/4.1@37378
git-svn-id: http://core.svn.wordpress.org/branches/4.1@37344 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-05-06 17:57:22 +00:00
Nikolay Bachiyski
38154c01ce
Taxonomies: make sure taxonomy functions work correctly with taxonomy names with special characters
...
The codex says that taxonomy names "should only contain lowercase letters and the underscore character", but that's not enforced. It's too late to enforce it, since some plugins haven't been following it and the official phpdoc doesn't mention this restriction.
Merge of [37133] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@37138
git-svn-id: http://core.svn.wordpress.org/branches/4.1@37105 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-03-30 17:32:22 +00:00
Jeremy Felt
92c3f699a9
Multisite: Improve escaping in network settings.
...
Merge of [37124] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@37128
git-svn-id: http://core.svn.wordpress.org/branches/4.1@37095 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-03-30 16:05:21 +00:00
Dominik Schilling
e73593c805
HTTP: Improve detection of valid IP addresses.
...
Merge of [37115] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@37119
git-svn-id: http://core.svn.wordpress.org/branches/4.1@37086 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-03-30 15:52:33 +00:00
Dominik Schilling
cd0d7d699d
Multisite: Validate new email address confirmations.
...
Merge of [37103] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@37107
git-svn-id: http://core.svn.wordpress.org/branches/4.1@37074 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-03-30 14:50:48 +00:00
Nikolay Bachiyski
63bde8f97e
Snoopy: use escapeshellarg instead of escapeshellcmd
...
We are escaping arguments, not commands, so we'd better use the semantically correct function, even though they are similar.
Merges [37094] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@37098
git-svn-id: http://core.svn.wordpress.org/branches/4.1@37065 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-03-30 14:10:23 +00:00
Dominik Schilling
7df345b1cc
Bump 4.1 branch to 4.1.10.
...
Built from https://develop.svn.wordpress.org/branches/4.1@36458
git-svn-id: http://core.svn.wordpress.org/branches/4.1@36425 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-02-02 17:29:22 +00:00
Dominik Schilling
5b076e981c
Better validation of the URL used in HTTP redirects.
...
Merges [36444] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@36450
git-svn-id: http://core.svn.wordpress.org/branches/4.1@36417 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-02-02 17:00:50 +00:00
Dominik Schilling
ac434506e1
HTTP: `0.1.2.3` is not a valid IP.
...
Merges [36435] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@36439
git-svn-id: http://core.svn.wordpress.org/branches/4.1@36406 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-02-02 13:04:42 +00:00
Dominik Schilling
197d5128b2
Bump 4.1 branch to 4.1.9.
...
Built from https://develop.svn.wordpress.org/branches/4.1@36199
git-svn-id: http://core.svn.wordpress.org/branches/4.1@36166 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-01-06 18:50:23 +00:00
Aaron Jorbin
e253e4e3d6
Theme: Escape error messages
...
[36185] for 4.1 branch
Built from https://develop.svn.wordpress.org/branches/4.1@36189
git-svn-id: http://core.svn.wordpress.org/branches/4.1@36156 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-01-06 17:26:50 +00:00
Dion Hulse
3ff8fa5386
Background Updates: Remove the 7am/7pm background update check.
...
This changeset is a more basic version of [36180], clearing the extra now redundant schedule.
As the functionality for this was introduced in 3.9, [28129] has been backported to 3.7/3.8, allowing the API TTL to be respected by those versions.
See #27772 .
Fixes #35323 .
Built from https://develop.svn.wordpress.org/trunk@36184
git-svn-id: http://core.svn.wordpress.org/branches/4.1@36151 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-01-06 13:24:33 +00:00
Dion Hulse
a86aa0bf8e
Update Akismet externals
...
git-svn-id: http://core.svn.wordpress.org/branches/4.1@35107 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-10-13 17:19:01 +00:00
Helen Hou-Sandí
a39030c223
Finish bumping the 4.1 branch to 4.1.8.
...
Built from https://develop.svn.wordpress.org/branches/4.1@34192
git-svn-id: http://core.svn.wordpress.org/branches/4.1@34160 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-09-15 14:51:36 +00:00