whyisjake 9a0b89f7a8 Backporting several bug fixes. ...

- Query: Remove the static query property.
- HTTP API: Protect against hex interpretation.
- Filesystem API: Prevent directory travelersals when creating new folders.
- Administration: Ensure that admin referer nonce is valid.
- REST API: Send a Vary: Origin header on GET requests.
- Customizer: Properly sanitize background images.

Backports [46474], [46475], [46476], [46477], [46478], [46483], [46485] to the 4.4 branch.

Built from https://develop.svn.wordpress.org/branches/4.4@46498


git-svn-id: http://core.svn.wordpress.org/branches/4.4@46295 1a063a9b-81f0-0310-95a4-ce76da25c4cd

2019-10-14 19:09:23 +00:00

..

crop

…

imgareaselect

…

jcrop

…

jquery

Build Tools: Update the preserveComments option for uglify:jqueryui.

2015-11-07 12:37:26 +00:00

mediaelement

External Libraries: Remove unnecessary / obsoleted MediaElement.js files.

2018-01-16 08:09:32 +00:00

plupload

Media: Simplify upload error message construction.

2017-05-16 18:03:01 +00:00

swfupload

…

thickbox

Thickbox: spinner should disappear when loading is done.

2015-10-28 18:19:26 +00:00

tinymce

Editor: Prevent adding javascript: and data: URLs through the inline link dialog.

2017-09-19 10:18:31 +00:00

admin-bar.js

…

admin-bar.min.js

…

autosave.js

Admin: fix repositioning of notices when the first header is not an immediate children of .wrap.

2016-01-02 03:32:23 +00:00

autosave.min.js

Admin: fix repositioning of notices when the first header is not an immediate children of .wrap.

2016-01-02 03:32:23 +00:00

backbone.min.js

…

colorpicker.js

…

colorpicker.min.js

…

comment-reply.js

Comments: after [35593], extend support to IE8 and improve checking for elements hidden with CSS

2015-11-18 19:15:28 +00:00

comment-reply.min.js

Comments: after [35593], extend support to IE8 and improve checking for elements hidden with CSS

2015-11-18 19:15:28 +00:00

customize-base.js

…

customize-base.min.js

…

customize-loader.js

…

customize-loader.min.js

…

customize-models.js

…

customize-models.min.js

…

customize-preview-nav-menus.js

…

customize-preview-nav-menus.min.js

…

customize-preview-widgets.js

…

customize-preview-widgets.min.js

…

customize-preview.js

Customizer: remove the title attribute from the Preview html element while loading.

2015-10-25 15:14:26 +00:00

customize-preview.min.js

Customizer: remove the title attribute from the Preview html element while loading.

2015-10-25 15:14:26 +00:00

customize-views.js

…

customize-views.min.js

…

heartbeat.js

…

heartbeat.min.js

…

hoverIntent.js

…

hoverIntent.min.js

…

json2.js

…

json2.min.js

…

masonry.min.js

…

mce-view.js

TinyMCE: Improve the previews for shortcodes.

2017-09-19 12:43:37 +00:00

mce-view.min.js

TinyMCE: Improve the previews for shortcodes.

2017-09-19 12:43:37 +00:00

media-audiovideo.js

Backporting several bug fixes.

2019-10-14 19:09:23 +00:00

media-audiovideo.min.js

Backporting several bug fixes.

2019-10-14 19:09:23 +00:00

media-editor.js

…

media-editor.min.js

…

media-grid.js

Backporting several bug fixes.

2019-10-14 19:09:23 +00:00

media-grid.min.js

Backporting several bug fixes.

2019-10-14 19:09:23 +00:00

media-models.js

…

media-models.min.js

…

media-views.js

Backporting several bug fixes.

2019-10-14 19:09:23 +00:00

media-views.min.js

Backporting several bug fixes.

2019-10-14 19:09:23 +00:00

quicktags.js

…

quicktags.min.js

…

shortcode.js

Abstract the shortcode attribute parsing regex into its own function, update the JavaScript counterpart, and introduce a test to ensure they do not diverge again.

2015-10-08 03:12:24 +00:00

shortcode.min.js

Abstract the shortcode attribute parsing regex into its own function, update the JavaScript counterpart, and introduce a test to ensure they do not diverge again.

2015-10-08 03:12:24 +00:00

swfobject.js

…

tw-sack.js

…

tw-sack.min.js

…

twemoji.js

Emoji: Add Emoji Diversity support, and fall back to twemoji if the browser doesn't support diverse emoji.

2016-01-03 04:42:23 +00:00

twemoji.min.js

Emoji: Add Emoji Diversity support, and fall back to twemoji if the browser doesn't support diverse emoji.

2016-01-03 04:42:23 +00:00

underscore.min.js

…

utils.js

…

utils.min.js

…

wp-a11y.js

…

wp-a11y.min.js

…

wp-ajax-response.js

…

wp-ajax-response.min.js

…

wp-auth-check.js

Administration: when hiding the login modal and unbind the auth check, also unbind the heartbeat auth check.

2015-11-07 16:22:25 +00:00

wp-auth-check.min.js

Administration: when hiding the login modal and unbind the auth check, also unbind the heartbeat auth check.

2015-11-07 16:22:25 +00:00

wp-backbone.js

…

wp-backbone.min.js

…

wp-embed-template.js

Embeds: Fix support for embedding in non-WordPress sites.

2015-11-09 00:08:27 +00:00

wp-embed-template.min.js

Embeds: Fix support for embedding in non-WordPress sites.

2015-11-09 00:08:27 +00:00

wp-embed.js

Embeds: Improve how iframes are loaded after being initially hidden.

2016-03-30 10:57:27 +00:00

wp-embed.min.js

Embeds: Improve how iframes are loaded after being initially hidden.

2016-03-30 10:57:27 +00:00

wp-emoji-loader.js

Emoji: Fix the diversity emoji check in Safari.

2016-03-29 02:19:28 +00:00

wp-emoji-loader.min.js

Emoji: Fix the diversity emoji check in Safari.

2016-03-29 02:19:28 +00:00

wp-emoji-release.min.js

Emoji: Add some extra IE11 compatibility.

2016-03-29 02:02:51 +00:00

wp-emoji.js

Emoji: Add some extra IE11 compatibility.

2016-03-29 02:02:51 +00:00

wp-emoji.min.js

Emoji: Add some extra IE11 compatibility.

2016-03-29 02:02:51 +00:00

wp-list-revisions.js

…

wp-list-revisions.min.js

…

wp-lists.js

…

wp-lists.min.js

…

wp-pointer.js

…

wp-pointer.min.js

…

wp-util.js

…

wp-util.min.js

…

wpdialog.js

…

wpdialog.min.js

…

wplink.js

Editor: Prevent adding javascript: and data: URLs through the inline link dialog.

2017-09-19 10:18:31 +00:00

wplink.min.js

Editor: Prevent adding javascript: and data: URLs through the inline link dialog.

2017-09-19 10:18:31 +00:00

zxcvbn-async.js

…

zxcvbn-async.min.js

…

zxcvbn.min.js

…