ed1fb81c47
Users: Provide a fallback for incorrect HTTP referrers.
...
Merge of [41398] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@41425
git-svn-id: http://core.svn.wordpress.org/branches/4.0@41258 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-09-19 11:15:17 +00:00
5fc965b084
Editor: Prevent adding `javascript:` and `data:` URLs through the inline link dialog.
...
Merge of [41393] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@41408
git-svn-id: http://core.svn.wordpress.org/branches/4.0@41241 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-09-19 10:20:09 +00:00
395d3d7bfc
Bump 4.0 branch to version 4.0.18.
...
Built from https://develop.svn.wordpress.org/branches/4.0@40755
git-svn-id: http://core.svn.wordpress.org/branches/4.0@40613 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-05-16 21:53:42 +00:00
8f69071d2d
Media: Simplify upload error message construction.
...
Merges [40736] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@40744
git-svn-id: http://core.svn.wordpress.org/branches/4.0@40602 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-05-16 18:05:18 +00:00
f27c1f06fe
Add nonce for updating file system credentials.
...
Merges [40723] to 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@40731
git-svn-id: http://core.svn.wordpress.org/branches/4.0@40589 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-05-16 14:57:18 +00:00
89a35259c0
Customize: Ignore invalid customization sessions.
...
Merge of [40704] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@40712
git-svn-id: http://core.svn.wordpress.org/branches/4.0@40575 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-05-16 12:20:43 +00:00
f7259c14e2
Adjust post meta checks
...
Merges [40692] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@40700
git-svn-id: http://core.svn.wordpress.org/branches/4.0@40563 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-05-16 08:53:37 +00:00
f35de85c64
Whitelist post arguments in XML-RPC
...
Merges [40677] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@40685
git-svn-id: http://core.svn.wordpress.org/branches/4.0@40548 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-05-16 08:27:19 +00:00
7b33a67b95
Bump 4.0 branch to version 4.0.17.
...
Built from https://develop.svn.wordpress.org/branches/4.0@40494
git-svn-id: http://core.svn.wordpress.org/branches/4.0@40370 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-04-20 16:27:43 +00:00
47b7dedef6
Fix broken audio/video functions when sanitizing ID3 data
...
This fixes a bug where running `wp_kses_post_deep()` on all the ID3
tag data corrupted blob data.
See #40075 , #40085 .
Merges [40400] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@40467
git-svn-id: http://core.svn.wordpress.org/branches/4.0@40343 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-04-17 13:31:19 +00:00
a40fe1c493
Bump 4.0 branch to version 4.0.16.
...
Built from https://develop.svn.wordpress.org/branches/4.0@40209
git-svn-id: http://core.svn.wordpress.org/branches/4.0@40148 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-03-06 16:39:19 +00:00
cd7144b8cd
Strip control characters before validating redirect.
...
Merges [40183] to 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@40191
git-svn-id: http://core.svn.wordpress.org/branches/4.0@40130 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-03-06 13:45:44 +00:00
acbd361baf
Plugins: Add file check to plugin deletions.
...
Merges [40169] to 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@40177
git-svn-id: http://core.svn.wordpress.org/branches/4.0@40116 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-03-06 13:04:19 +00:00
706528048b
Embeds: URL encode YouTube video IDs for broader compatibility.
...
Merge of [40160] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@40168
git-svn-id: http://core.svn.wordpress.org/branches/4.0@40107 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-03-06 12:08:43 +00:00
58440ac942
Validate video and audio metadata.
...
Merge of [40148] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@40156
git-svn-id: http://core.svn.wordpress.org/branches/4.0@40095 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-03-06 08:11:19 +00:00
25e87a205e
Bump 4.0 branch to version 4.0.15.
...
Built from https://develop.svn.wordpress.org/branches/4.0@40003
git-svn-id: http://core.svn.wordpress.org/branches/4.0@39940 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-26 18:28:20 +00:00
18c516254c
Posts, Post Types: When using Excerpt mode on the Posts list table, ensure the excerpt output matches what was manually entered into the Excerpt field.
...
Merges [39956] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@39986
git-svn-id: http://core.svn.wordpress.org/branches/4.0@39923 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-26 14:19:18 +00:00
6c9f0e2e0f
Press This: Do not show Categories & Tags UI for users who cannot assign terms to posts anyways.
...
Merge of [39968] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@39978
git-svn-id: http://core.svn.wordpress.org/branches/4.0@39915 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-26 14:14:44 +00:00
98590a9c90
Query: Ensure that queries work correctly with post type names with special characters.
...
Merge of [39952] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@39963
git-svn-id: http://core.svn.wordpress.org/branches/4.0@39900 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-26 13:52:45 +00:00
39566256f7
Bump 4.0 branch to version 4.0.14.
...
Built from https://develop.svn.wordpress.org/branches/4.0@39867
git-svn-id: http://core.svn.wordpress.org/branches/4.0@39804 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-11 16:59:18 +00:00
b236cbe16d
Media: Fix exif_imagetype check in wp_get_image_mime
...
This is a follow up to [39831].
Merges [39850] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@39858
git-svn-id: http://core.svn.wordpress.org/branches/4.0@39795 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-11 16:44:41 +00:00
d94f5603fa
Media: Improve image filetype checking.
...
This adds a new function `wp_get_image_mime()` which is used by
`wp_check_filetype_and_ext()` to validate image files using
`exif_imagetype()` if available instead of `getimagesize()`.
`getimagesize()` is less performant than `exif_imagetype()` and is
dependent on GD. If `exif_imagetype()` is not available, it falls back to
`getimagesize()` as before.
If `wp_check_filetype_and_ext()` can't validate the filetype, we now return
`false` for ext/MIME values.
Merges [39831] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@39839
git-svn-id: http://core.svn.wordpress.org/branches/4.0@39777 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-11 13:19:18 +00:00
5fcb58d0cb
Updates: Translate plugin data on the Updates screen.
...
Merge of [39808] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@39827
git-svn-id: http://core.svn.wordpress.org/branches/4.0@39765 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-11 11:43:08 +00:00
d8e0c202c5
Themes: Fix markup for theme name fallbacks.
...
Merge of [39807] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@39816
git-svn-id: http://core.svn.wordpress.org/branches/4.0@39754 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-11 11:12:39 +00:00
af786324a1
Multisite: Use `wp_rand()` in signup key creation.
...
Merges [39795] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@39803
git-svn-id: http://core.svn.wordpress.org/branches/4.0@39741 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-11 05:36:18 +00:00
d04147c2d3
Update PHPMailer to 5.2.22.
...
The full list of changes is available here:
https://github.com/PHPMailer/PHPMailer/compare/v5.2.21...v5.2.22
Merges [39759] to the 4.0 branch.
Fixes #37210 for 4.0.
Built from https://develop.svn.wordpress.org/branches/4.0@39791
git-svn-id: http://core.svn.wordpress.org/branches/4.0@39729 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-11 05:26:18 +00:00
dbfc89db8e
Mail: Disable wp-mail.php when `mailserver_url` is mail.example.com.
...
Merges [39772] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@39780
git-svn-id: http://core.svn.wordpress.org/branches/4.0@39718 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-11 05:20:08 +00:00
0f8124cdc6
Add nonce for widget accessibility mode.
...
Props vortfu.
See #23328 .
Merges [39765] to 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@39768
git-svn-id: http://core.svn.wordpress.org/branches/4.0@39706 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-11 01:51:19 +00:00
918f720050
Mail: Upgrade PHPMailer to 5.2.21.
...
Merges [39645], [36083], [33142], [33124], [29783] to the 4.0 branch.
See #37210 .
Built from https://develop.svn.wordpress.org/branches/4.0@39728
git-svn-id: http://core.svn.wordpress.org/branches/4.0@39668 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-06 22:06:41 +00:00
e21c149861
Media: Improved media titles when created from filename.
...
Preserves spaces and generally creates more accurate, cleaner titles from filenames of uploaded media.
Merge of [38615] to the 4.0 branch.
Fixes #37989 .
Built from https://develop.svn.wordpress.org/branches/4.0@39716
git-svn-id: http://core.svn.wordpress.org/branches/4.0@39656 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-06 22:01:43 +00:00
600bd299c2
General: Update copyright year to 2017 in license.txt.
...
Props Nikschavan.
Merges [39659] to the 4.0 branch.
Fixes #39433 .
Built from https://develop.svn.wordpress.org/branches/4.0@39704
git-svn-id: http://core.svn.wordpress.org/branches/4.0@39644 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-01-06 21:55:13 +00:00
b79f440e16
Bump 4.0 branch to 4.0.13.
...
Built from https://develop.svn.wordpress.org/branches/4.0@38555
git-svn-id: http://core.svn.wordpress.org/branches/4.0@38498 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-09-07 15:01:17 +00:00
8edc8406ec
Media: Sanitize upload filename.
...
Merge of [38538] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@38545
git-svn-id: http://core.svn.wordpress.org/branches/4.0@38488 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-09-07 14:00:19 +00:00
2ec2662e9e
Upgrade/Install: Sanitize file name in `File_Upload_Upgrader`.
...
Merge of [38524] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@38531
git-svn-id: http://core.svn.wordpress.org/branches/4.0@38472 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-09-06 18:00:20 +00:00
7f457eaddd
Bump 4.0 branch to 4.0.12.
...
Built from https://develop.svn.wordpress.org/branches/4.0@37833
git-svn-id: http://core.svn.wordpress.org/branches/4.0@37798 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 16:42:17 +00:00
a6b669c65d
Media: Improve handling of extensionless filenames.
...
Merge of [37756] to the 4.0 branch.
See #37111 .
Built from https://develop.svn.wordpress.org/branches/4.0@37819
git-svn-id: http://core.svn.wordpress.org/branches/4.0@37784 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 14:58:18 +00:00
8197793447
Admin: escape URL-encoded permalinks
...
Merge of [37801] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@37817
git-svn-id: http://core.svn.wordpress.org/branches/4.0@37782 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 14:57:16 +00:00
e16790e7e2
Revisions: Change the capability needed to view revision diffs to `edit_post`.
...
Merge of [37779] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@37802
git-svn-id: http://core.svn.wordpress.org/branches/4.0@37767 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 14:47:17 +00:00
4c2ff51802
Admin: Escape attachment name in case it contains special characters
...
Merge of [37774] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@37792
git-svn-id: http://core.svn.wordpress.org/branches/4.0@37757 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 14:27:49 +00:00
01e2cb3978
Taxonomy: More specific cap check when processing category data on post save.
...
Ports [37691] to the 4.0 branch.
Props dlh.
Fixes #36379 .
Built from https://develop.svn.wordpress.org/branches/4.0@37782
git-svn-id: http://core.svn.wordpress.org/branches/4.0@37747 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 14:23:16 +00:00
d8fcaf9d61
Customize: Make sure that preview and return URLs are URLs.
...
Merge of [37527] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@37775
git-svn-id: http://core.svn.wordpress.org/branches/4.0@37740 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 14:21:10 +00:00
2a56c9cbff
Admin: Allow for the consistent filtering of `auth_redirect_scheme`
...
Merge of [37651] to the 4.0 branch.
See #37047 .
Built from https://develop.svn.wordpress.org/branches/4.0@37763
git-svn-id: http://core.svn.wordpress.org/branches/4.0@37728 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 14:13:39 +00:00
7277742a5d
Bump 4.0 branch to 4.0.11.
...
Built from https://develop.svn.wordpress.org/branches/4.0@37389
git-svn-id: http://core.svn.wordpress.org/branches/4.0@37355 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-05-06 18:15:17 +00:00
909877540e
External Libraries: Update plupload from upstream
...
Built from https://develop.svn.wordpress.org/branches/4.0@37377
git-svn-id: http://core.svn.wordpress.org/branches/4.0@37343 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-05-06 17:56:30 +00:00
217fe37a0f
Taxonomies: make sure taxonomy functions work correctly with taxonomy names with special characters
...
The codex says that taxonomy names "should only contain lowercase letters and the underscore character", but that's not enforced. It's too late to enforce it, since some plugins haven't been following it and the official phpdoc doesn't mention this restriction.
Merge of [37133] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@37139
git-svn-id: http://core.svn.wordpress.org/branches/4.0@37106 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-03-30 17:36:16 +00:00
3291a9819a
Multisite: Improve escaping in network settings.
...
Merge of [37124] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@37129
git-svn-id: http://core.svn.wordpress.org/branches/4.0@37096 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-03-30 16:05:36 +00:00
84ad22efe9
HTTP: Improve detection of valid IP addresses.
...
Merge of [37115] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@37120
git-svn-id: http://core.svn.wordpress.org/branches/4.0@37087 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-03-30 15:52:49 +00:00
869f687c65
Multisite: Validate new email address confirmations.
...
Merge of [37103] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@37108
git-svn-id: http://core.svn.wordpress.org/branches/4.0@37075 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-03-30 14:51:03 +00:00
8f0764e4ba
Snoopy: use escapeshellarg instead of escapeshellcmd
...
We are escaping arguments, not commands, so we'd better use the semantically correct function, even though they are similar.
Merges [37094] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@37099
git-svn-id: http://core.svn.wordpress.org/branches/4.0@37066 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-03-30 14:11:17 +00:00
20c5220229
Bump 4.0 branch to 4.0.10.
...
Built from https://develop.svn.wordpress.org/branches/4.0@36459
git-svn-id: http://core.svn.wordpress.org/branches/4.0@36426 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-02-02 17:29:36 +00:00
Dominik Schilling
Aaron Campbell
Pascal Birchler
James Nylen
Jeremy Felt
John Blackbourn
Joe McGill
Dion Hulse
Boone Gorges
Nikolay Bachiyski
Rachel Baker