Sergey Biryukov e1a05244d9 Escape the output in wp_ajax_upload_attachment(). ...

Merges [45936] to the 3.9 branch.
Props whyisjake, sstoqnov.
Built from https://develop.svn.wordpress.org/branches/3.9@45966


git-svn-id: http://core.svn.wordpress.org/branches/3.9@45777 1a063a9b-81f0-0310-95a4-ce76da25c4cd

2019-09-04 16:48:23 +00:00

..

admin.php

Load the new admin and network admin mo files, if present. see #19852

2012-01-27 22:19:56 +00:00

ajax-actions.php

Escape the output in wp_ajax_upload_attachment().

2019-09-04 16:48:23 +00:00

bookmark.php

Inline documentation for hooks in wp-admin/includes/bookmark.php.

2013-10-07 02:19:09 +00:00

class-ftp-pure.php

First there were two, and now there are three -- in the @since versions that came before and that shall be. And so it will be, says nacin.

2013-12-24 18:57:12 +00:00

class-ftp-sockets.php

First there were two, and now there are three -- in the @since versions that came before and that shall be. And so it will be, says nacin.

2013-12-24 18:57:12 +00:00

class-ftp.php

"LGPL License" is redundant.

2013-02-15 16:26:46 +00:00

class-pclzip.php

Associate subdirector of whitespace trims trailing whites with pinking shears.

2009-10-15 20:26:21 +00:00

class-wp-comments-list-table.php

Ensure post titles are correctly escaped on the Dashboard. Merge of [32175] to the 3.9 branch.

2015-04-20 13:39:14 +00:00

class-wp-filesystem-base.php

First pass at documenting the WP_Filesystem methods. This also introduces stubs of the methods into the base class which are documented, which subclasses can override, some methods were cleaned up at the same time.

2013-09-22 04:44:10 +00:00

class-wp-filesystem-direct.php

Filesystem: Fix getchmod() for direct and ssh2 transports, for directories.

2014-03-17 20:17:15 +00:00

class-wp-filesystem-ftpext.php

Being consistent is the gist, no single @since should have been missed.

2013-12-25 02:00:11 +00:00

class-wp-filesystem-ftpsockets.php

Being consistent is the gist, no single @since should have been missed.

2013-12-25 02:00:11 +00:00

class-wp-filesystem-ssh2.php

Filesystem: Fix getchmod() for direct and ssh2 transports, for directories.

2014-03-17 20:17:15 +00:00

class-wp-importer.php

Remove lingering instances of call time pass-by-reference, limited to instances of callable - use $this instead of &$this.

2013-09-05 16:34:09 +00:00

class-wp-links-list-table.php

Remove all "valign" attributes from tables in wp-admin, props MikeHansenMe, Marventus. Fixes #22712.

2014-01-24 19:06:15 +00:00

class-wp-list-table.php

Remove "Show" prefix from filter dropdowns, see #26743.

2014-03-19 22:13:14 +00:00

class-wp-media-list-table.php

Avoid PHP notices in Media Library if an attachment parent post type no longer exists.

2014-03-17 15:33:15 +00:00

class-wp-ms-sites-list-table.php

Remove all "valign" attributes from tables in wp-admin, props MikeHansenMe, Marventus. Fixes #22712.

2014-01-24 19:06:15 +00:00

class-wp-ms-themes-list-table.php

Inline documentation for hooks in wp-admin/includes/class-wp-ms-themes-list-table.php.

2014-02-04 08:25:13 +00:00

class-wp-ms-users-list-table.php

List tables: escape user e-mails

2015-09-14 22:44:14 +00:00

class-wp-plugin-install-list-table.php

Use filtered per_page value in WP_Plugin_Install_List_Table and WP_Theme_Install_List_Table.

2014-02-21 18:30:14 +00:00

class-wp-plugins-list-table.php

General: Add missing URL-encoding and add extra hardening to plugin and template names when they're displayed in the admin area.

2017-09-19 13:44:15 +00:00

class-wp-posts-list-table.php

Posts, Post Types: When using Excerpt mode on the Posts list table, ensure the excerpt output matches what was manually entered into the Excerpt field.

2017-01-26 14:20:15 +00:00

class-wp-terms-list-table.php

Inline documentation for hooks in wp-admin/includes/class-wp-terms-list-table.php.

2014-02-04 07:56:12 +00:00

class-wp-theme-install-list-table.php

Inline documentation for hooks in wp-admin/includes/class-wp-theme-install-list-table.php.

2014-03-06 13:44:14 +00:00

class-wp-themes-list-table.php

Avoid searching HTML tags when searching plugins and themes. Fixes #27136. Props enej.

2014-03-11 22:24:15 +00:00

class-wp-upgrader-skins.php

Inline documentation for hooks in wp-admin/includes/class-wp-upgrader-skins.php.

2014-04-08 06:26:16 +00:00

class-wp-upgrader.php

Upgrade/Install: Sanitize file name in File_Upload_Upgrader.

2016-09-06 18:03:16 +00:00

class-wp-users-list-table.php

List tables: escape user e-mails

2015-09-14 22:44:14 +00:00

comment.php

Inline documentation for hooks in wp-admin/includes/comment.php.

2013-09-14 01:01:08 +00:00

continents-cities.php

Give continents-cities their own textdomain. Props nbachiyski, Denis-de-Bernardy . fixes #9794

2009-05-14 20:05:25 +00:00

dashboard.php

Capabilities: When creating an auto-draft, ensure that the current user still has permission to do so.

2015-07-23 04:12:14 +00:00

deprecated.php

Remove _relocate_children(), which has had no purpose for some time.

2014-02-25 17:10:14 +00:00

export.php

Inline documentation for hooks in wp-admin/includes/export.php.

2014-01-28 08:10:12 +00:00

file.php

Filesystem API: Ensure filenames are valid before attempting to unzip them to ensure malformed file paths don't cause issues.

2017-09-19 14:45:15 +00:00

image-edit.php

Account for new cropping settings in the image editor.

2014-04-11 03:10:14 +00:00

image.php

Validate image data.

2014-11-20 15:53:52 +00:00

import.php

Slight renaming in our callback in [27373]. see #14424.

2014-03-03 17:09:14 +00:00

list-table.php

Remove lingering instances of call time pass-by-reference, limited to instances of callable - use $this instead of &$this.

2013-09-05 16:34:09 +00:00

media.php

Fix broken audio/video functions when sanitizing ID3 data

2017-04-17 13:34:16 +00:00

menu.php

Remove some debug cruft accidentally committed in [27670].

2014-03-24 02:38:17 +00:00

meta-boxes.php

Cleanup up the display, escaping, and handling of ID3 data for media. Rename wp_get_relevant_id3_keys() to wp_get_attachment_id3_keys().

2014-03-31 05:16:16 +00:00

misc.php

Generalize the hook documentation for the set-screen-option filter.

2014-03-03 17:51:14 +00:00

ms-deprecated.php

Remove ms-files.php rewriting from WordPress multisite. fixes #19235.

2012-09-11 22:22:20 +00:00

ms.php

Always decode special characters for email subjects.

2014-03-28 02:44:15 +00:00

nav-menu.php

Remove all @package and @subpackage PHPDoc tags not at the file- or class-levels in core.

2014-02-25 17:14:14 +00:00

plugin-install.php

Translate a string added in 3.7.1 but never translated previously.

2014-04-16 00:38:14 +00:00

plugin.php

Fix docs for hooks in deactivate_plugins() and activate_plugin(). see #27189, #27188.

2014-03-27 02:02:14 +00:00

post.php

Editor: Remove unwanted fields before saving posts.

2018-12-13 01:59:10 +00:00

revision.php

Spell out duplicate hook locations.

2013-10-24 22:59:20 +00:00

schema.php

Remove old links_recently_updated_* DB options that never had a UI.

2014-04-03 03:10:15 +00:00

screen.php

Multisite: Validate activation links.

2018-12-13 01:58:11 +00:00

taxonomy.php

Inline documentation for hooks in wp-admin/includes/taxonomy.php.

2014-03-24 03:14:15 +00:00

template.php

General: Add missing URL-encoding and add extra hardening to plugin and template names when they're displayed in the admin area.

2017-09-19 13:44:15 +00:00

theme-install.php

Bring the theme browsing experience from 3.8 to the theme installer. First pass.

2014-03-11 07:47:15 +00:00

theme.php

Translate a string added in 3.7.1 but never translated previously.

2014-04-16 00:38:14 +00:00

update-core.php

External Libraries: Remove unnecessary / obsoleted MediaElement.js files.

2018-01-16 08:15:17 +00:00

update.php

Translate a string added in 3.7.1 but never translated previously.

2014-04-16 00:38:14 +00:00

upgrade.php

Upgrade: $wpdb->get_col_length() sanity check: bail on unexpected return value.

2015-05-06 23:14:15 +00:00

user.php

Remove lame debugging. see #23057.

2014-03-08 03:16:27 +00:00

widgets.php

Remove temporary hooks added in [26865].

2014-02-28 00:45:16 +00:00