desrosj be121a35d7 Grouped backports to the 4.2 branch. ...

- Query: Improve sanitization within `WP_Tax_Query`.
- Query: Improve sanitization within `WP_Meta_Query`.
- Upgrade/Install: Avoid using `unserialize()` unnecessarily.
- Formatting: Correctly encode ASCII characters in post slugs.

Merges [52454-52457] to the 4.2 branch.
Props vortfu, dd32, ehtis, zieladam, whyisjake, xknown, peterwilsoncc, desrosj, iandunn.
Built from https://develop.svn.wordpress.org/branches/4.2@52481


git-svn-id: http://core.svn.wordpress.org/branches/4.2@52073 1a063a9b-81f0-0310-95a4-ce76da25c4cd

2022-01-06 18:20:40 +00:00

..

admin.php

Fix syntax for single- and multi-line comments in wp-admin-directory files.

2014-07-17 09:14:16 +00:00

ajax-actions.php

Escape the output in wp_ajax_upload_attachment().

2019-09-04 16:39:00 +00:00

bookmark.php

Switch to a 403 response code in places where it is more appropriate than a 500 due to permissions errors.

2014-11-16 06:16:22 +00:00

class-ftp-pure.php

First there were two, and now there are three -- in the @since versions that came before and that shall be. And so it will be, says nacin.

2013-12-24 18:57:12 +00:00

class-ftp-sockets.php

First there were two, and now there are three -- in the @since versions that came before and that shall be. And so it will be, says nacin.

2013-12-24 18:57:12 +00:00

class-ftp.php

PHP 5.2 compatibility for [30310], __DIR__ wasn't added until PHP 5.3. Props TobiasBg. Fixes #29628

2014-11-12 10:44:23 +00:00

class-pclzip.php

Associate subdirector of whitespace trims trailing whites with pinking shears.

2009-10-15 20:26:21 +00:00

class-wp-comments-list-table.php

Ensure post titles are correctly escaped on the Dashboard.

2015-04-20 07:39:25 +00:00

class-wp-filesystem-base.php

Don't call the size function count() as part of a test condition in loops. Compute the size beforehand, and not on each iteration.

2015-02-26 05:48:24 +00:00

class-wp-filesystem-direct.php

Improve some wp-admin/includes/class-wp-filesystem-*.php docs for @param.

2014-12-20 20:40:23 +00:00

class-wp-filesystem-ftpext.php

WP_Filesystem: Change WP_Filesystem_FTPext::exists() and WP_Filesystem_ftpsockets::exists() to return true for empty directories.

2015-03-18 19:22:27 +00:00

class-wp-filesystem-ftpsockets.php

WP_Filesystem: Change WP_Filesystem_FTPext::exists() and WP_Filesystem_ftpsockets::exists() to return true for empty directories.

2015-03-18 19:22:27 +00:00

class-wp-filesystem-ssh2.php

SSH2 Upgrade transport: Trim the trailing newline character from the ouput of pwd to avoid a PHP Segfault.

2015-03-09 04:32:27 +00:00

class-wp-importer.php

Fix some internal types that are passed to functions to avoid changing the acceptable types passed as arguments to those functions:

2015-01-16 22:51:21 +00:00

class-wp-links-list-table.php

List tables: Use CSS :nth-child() selectors for zebra striping.

2015-01-14 22:14:22 +00:00

class-wp-list-table.php

Improve table footer tab sequence by moving <tfoot> after <tbody>. Props afercia, rianrietveld, DrewAPicture. Fixes #30914.

2015-02-22 21:48:26 +00:00

class-wp-media-list-table.php

Admin: Escape attachment name in case it contains special characters

2016-06-21 14:26:11 +00:00

class-wp-ms-sites-list-table.php

Make dates in multisite site and user list tables translatable.

2015-03-19 16:22:28 +00:00

class-wp-ms-themes-list-table.php

In lieu of refactoring, add a private field to WP_MS_Themes_List_Table, $has_items. Ideally, this class would overload ->has_items() and not set a private field.

2015-01-12 16:17:22 +00:00

class-wp-ms-users-list-table.php

List tables: escape user e-mails

2015-09-14 22:41:28 +00:00

class-wp-plugin-install-list-table.php

Plugins Browser: Replace the download count with the number of Active installs of the plugin.

2015-04-02 23:49:27 +00:00

class-wp-plugins-list-table.php

General: Add missing URL-encoding and add extra hardening to plugin and template names when they're displayed in the admin area.

2017-09-19 13:32:30 +00:00

class-wp-posts-list-table.php

Posts, Post Types: When using Excerpt mode on the Posts list table, ensure the excerpt output matches what was manually entered into the Excerpt field.

2017-01-26 14:17:17 +00:00

class-wp-press-this.php

Press This: Verify intent before fetching in-page resources using Press This.

2017-03-06 14:04:31 +00:00

class-wp-terms-list-table.php

Accessibility: remove remaining instances of accesskey.

2015-02-04 03:46:24 +00:00

class-wp-theme-install-list-table.php

Use $this-> instead of parent:: when calling tablenav() in WP_Theme_Install_List_Table.

2015-03-07 23:03:27 +00:00

class-wp-themes-list-table.php

Use HTTPS URLs for codex.wordpress.org.

2015-04-12 21:29:32 +00:00

class-wp-upgrader-skins.php

Remove untranslatable period from a successful update message in Bulk_Upgrader_Skin::add_strings().

2015-02-22 17:07:24 +00:00

class-wp-upgrader.php

Upgrade/Install: Sanitize file name in File_Upload_Upgrader.

2016-09-06 17:55:29 +00:00

class-wp-users-list-table.php

List tables: escape user e-mails

2015-09-14 22:41:28 +00:00

comment.php

Correct references of @uses $wpdb in core documentation to use @global.

2014-10-31 17:56:22 +00:00

continents-cities.php

Give continents-cities their own textdomain. Props nbachiyski, Denis-de-Bernardy . fixes #9794

2009-05-14 20:05:25 +00:00

dashboard.php

Capabilities: When creating an auto-draft, ensure that the current user still has permission to do so.

2015-07-22 04:06:28 +00:00

deprecated.php

Merge three similar strings.

2015-03-11 15:25:28 +00:00

export.php

The keyword elseif should be used instead of else if so that all control keywords look like single words.

2015-01-08 07:05:25 +00:00

file.php

Filesystem API: Ensure filenames are valid before attempting to unzip them to ensure malformed file paths don't cause issues.

2017-09-19 14:43:56 +00:00

image-edit.php

Make a new function, wp_delete_file(). Use it.

2015-02-27 16:51:25 +00:00

image.php

EXIF/IPTC captions should populate Caption (post_excerpt) on upload, not Description (post_content).

2015-03-10 05:07:28 +00:00

import.php

In wp_import_handle_upload():

2014-12-20 21:10:24 +00:00

list-table.php

Fix mismatches in access modifiers for WP_List_Table + subclasses.

2014-07-13 22:09:16 +00:00

media.php

General: WordPress updates

2020-10-29 19:08:22 +00:00

menu.php

Replace array_shift() with reset() where appropriate for performance.

2015-03-19 03:56:27 +00:00

meta-boxes.php

Use HTTPS URLs for codex.wordpress.org.

2015-04-12 21:29:32 +00:00

misc.php

Administration: Pass the result of set-screen-option filter to the new set_screen_option_{$option} filter to ensure backward compatibility.

2020-07-01 09:53:39 +00:00

ms-deprecated.php

Empty return statements are unnecessary at the end of functions.

2015-03-08 23:09:27 +00:00

ms.php

General: WordPress updates

2020-10-29 19:08:22 +00:00

nav-menu.php

Admin notices: Make (most) core notices dismissible.

2015-04-01 22:06:28 +00:00

plugin-install.php

Enable users to initiate a shiny update from plugin detail modal

2015-04-07 03:09:26 +00:00

plugin.php

Remove unused local vars in delete_plugins(), delete_theme(), WP_Date_Query->validate_date_values(), global_terms(), and WP_Text_Diff_Renderer_Table->_changed().

2015-01-16 21:19:22 +00:00

post.php

Editor: Remove unwanted fields before saving posts.

2018-12-13 01:52:19 +00:00

revision.php

Remove ambiguity in the time display format in core, switches to using 24hr notation where am/pm isn't specified.

2015-03-23 02:14:27 +00:00

schema.php

Replace generic "Dear user" greeting in email notifications with a more personalized one.

2015-02-10 07:47:27 +00:00

screen.php

Multisite: Validate activation links.

2018-12-13 01:51:37 +00:00

taxonomy.php

Add missing descriptions to the DocBlocks for various functions in wp-admin/includes/taxonomy.php.

2015-01-29 11:34:22 +00:00

template.php

General: WordPress updates

2020-10-29 19:08:22 +00:00

theme-install.php

In HTML5, the action attribute is no longer required. Remove this attribute when empty.

2015-01-16 04:16:24 +00:00

theme.php

Don't return empty themes in wp_prepare_themes_for_js().

2015-04-22 16:11:25 +00:00

translation-install.php

Avoid a PHP notice in wp_install_language_form() and wp_dropdown_languages() if the language doesn't have a ISO 639-1 code.

2015-02-13 11:23:26 +00:00

update-core.php

External Libraries: Remove unnecessary / obsoleted MediaElement.js files.

2018-01-16 08:12:32 +00:00

update.php

Use HTTPS URLs for codex.wordpress.org.

2015-04-12 21:29:32 +00:00

upgrade.php

Grouped backports to the 4.2 branch.

2022-01-06 18:20:40 +00:00

user.php

Correct grammar when referring to "a user" vs "an user" in several places.

2015-04-05 14:44:27 +00:00

widgets.php

In HTML5, the action attribute is no longer required. Remove this attribute when empty.

2015-01-16 04:16:24 +00:00