WordPress/wp-includes
whyisjake 1fcbdb46e6 Backporting several bug fixes.
- Query: Remove the static query property.
- HTTP API: Protect against hex interpretation.
- Filesystem API: Prevent directory travelersals when creating new folders.
- Administration: Ensure that admin referer nonce is valid.
- REST API: Send a Vary: Origin header on GET requests.
- Customizer: Properly sanitize background images.

Backports [46474], [46475], [46476], [46477], [46478], [46483], [46485] to the 4.2 branch.

Built from https://develop.svn.wordpress.org/branches/4.2@46500


git-svn-id: http://core.svn.wordpress.org/branches/4.2@46297 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-10-14 19:15:22 +00:00
..
2015-04-23 16:26:10 +00:00
2014-09-11 19:07:17 +00:00
2019-10-14 19:15:22 +00:00
2017-01-11 05:25:28 +00:00
2019-10-14 19:15:22 +00:00
2019-10-14 19:15:22 +00:00
2019-10-14 19:15:22 +00:00
2019-10-14 19:15:22 +00:00
2019-10-14 19:15:22 +00:00
2014-11-30 22:56:25 +00:00
2019-09-04 22:03:21 +00:00