WordPress/wp-includes
Helen Hou-Sandí 275bff1895 Fire the `check_admin_referer` action on failure as well as success.
This enables things like logging nonce failures in the admin.

props markjaquith.
fixes #32207.

Built from https://develop.svn.wordpress.org/trunk@33017


git-svn-id: http://core.svn.wordpress.org/trunk@32988 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-07-01 03:37:23 +00:00
..
ID3 Update getID3 to 1.9.9 2015-06-28 00:17:25 +00:00
SimplePie SimplePie: Fix use of DOMElement as array. 2013-09-11 04:02:10 +00:00
Text Deprecate php4 style constructors 2015-06-28 15:27:24 +00:00
certificates WP_HTTP: Revert r30491 which updated the bundled root certificates. There's a report that this is breaking under certain PHP/OpenSSL versions (which we've encountered before), and we're safer with a slighty out of date CA bundle than breaking HTTPS communication on affected sites. 2014-12-07 03:13:22 +00:00
css TinyMCE: update to 4.2.1. Changelog: https://github.com/tinymce/tinymce-dist/blob/master/changelog.txt. 2015-07-01 00:52:25 +00:00
fonts Dashicons: Update to the latest files. 2014-12-09 19:34:23 +00:00
images Smilies: Update our few remaining smilies to better align with Twemoji, and add frownie.png until Twemoji provide a build containing it. 2015-04-10 06:20:26 +00:00
js TinyMCE: update to 4.2.1. Changelog: https://github.com/tinymce/tinymce-dist/blob/master/changelog.txt. 2015-07-01 00:52:25 +00:00
pomo Deprecate php4 style constructors 2015-06-28 15:27:24 +00:00
theme-compat Add a sanity check to `theme-compat/header.php` to avoid outputting CSS which could reference a non-existant file. 2015-05-12 10:47:29 +00:00
admin-bar.php Correct the title used on the user dashboard. 2015-06-24 00:37:28 +00:00
atomlib.php Deprecate php4 style constructors 2015-06-28 15:27:24 +00:00
author-template.php Pass the original `$user_id` variable to the filter in `get_the_author_meta()`. 2015-05-25 13:06:25 +00:00
bookmark-template.php Sanitize the class passed to `wp_list_bookmarks()` and allow passing an array. 2015-06-22 20:55:28 +00:00
bookmark.php In `bookmark.php`, clarify some `return` docs. 2015-05-21 20:13:25 +00:00
cache.php Add/standardize missing doc blocks for `cache.php`. 2015-05-22 04:24:26 +00:00
canonical.php Use `void` instead of `null` where appropriate when pipe-delimiting `@return` types. If a `@return` only contains `void`, remove it. 2015-05-24 05:40:25 +00:00
capabilities.php Ensure the `create_users` capability check checks the super admin status of the user in question, rather than the current user. 2015-06-17 00:03:27 +00:00
category-template.php Introduce 'wp_generate_tag_cloud_data' filter. 2015-06-29 14:16:26 +00:00
category.php Use `void` instead of `null` where appropriate when pipe-delimiting `@return` types. If a `@return` only contains `void`, remove it. 2015-05-24 05:40:25 +00:00
class-IXR.php Deprecate php4 style constructors 2015-06-28 15:27:24 +00:00
class-feed.php After [32656], add `@access` annotations to methods that have no doc block in `wp-includes/*`. 2015-05-29 21:37:24 +00:00
class-http.php For doc block types, favor `bool` over the few remaining `boolean`s 2015-06-27 01:03:25 +00:00
class-json.php Deprecate php4 style constructors 2015-06-28 15:27:24 +00:00
class-oembed.php YouTube oEmbed parsing: support the `m` subdomain. 2015-06-24 21:06:26 +00:00
class-phpass.php Deprecate php4 style constructors 2015-06-28 15:27:24 +00:00
class-phpmailer.php Update PHPMailer to 5.2.7 from 5.2.4. 2014-03-03 20:25:14 +00:00
class-pop3.php Deprecate php4 style constructors 2015-06-28 15:27:24 +00:00
class-simplepie.php Fix some documentation typos in various core files. 2014-08-13 03:56:17 +00:00
class-smtp.php PHPMailer: Merge upstream commit (PR274). 2014-09-29 10:28:17 +00:00
class-snoopy.php
class-wp-admin-bar.php After [32656], add `@access` annotations to methods that have no doc block in `wp-includes/*`. 2015-05-29 21:37:24 +00:00
class-wp-ajax-response.php `WP_Ajax_Response` has one property only, `$responses`. It was public until [28508], when it became `private` in name only. Is it worth 4 magic methods to pretend that this property is `private`? It is not. 2015-01-11 00:13:23 +00:00
class-wp-customize-control.php Customizer: Add an `aria-label` attribute to the Add Items button to improve accessibility. 2015-06-28 04:28:24 +00:00
class-wp-customize-manager.php For doc block types, favor `bool` over the few remaining `boolean`s 2015-06-27 01:03:25 +00:00
class-wp-customize-nav-menus.php Customizer: Fix live preview for menu item titles. 2015-06-20 22:33:26 +00:00
class-wp-customize-panel.php `ob_get_contents()` followed by `ob_end_clean()` can be replaced by `ob_get_clean()`. 2015-06-27 01:12:24 +00:00
class-wp-customize-section.php Customizer: Add an `aria-expanded` attribute to the Add Menu button to improve accessibility. 2015-06-27 10:05:24 +00:00
class-wp-customize-setting.php Customizer: Escape original title of menu items. 2015-06-20 19:55:25 +00:00
class-wp-customize-widgets.php For doc block types, favor `bool` over the few remaining `boolean`s 2015-06-27 01:03:25 +00:00
class-wp-editor.php TinyMCE: add the editor focusing help the Keyboard Shortcuts modal. 2015-06-26 18:49:25 +00:00
class-wp-embed.php When calling `unset()`, it is unnecessary to immediately precede it with a call to `isset()`. 2015-05-22 05:47:25 +00:00
class-wp-error.php Use `void` instead of `null` where appropriate when pipe-delimiting `@return` types. If a `@return` only contains `void`, remove it. 2015-05-24 05:40:25 +00:00
class-wp-http-ixr-client.php Add missing doc blocks to `wp-image-editor*.php`. 2015-05-22 06:18:25 +00:00
class-wp-image-editor-gd.php For doc block types, favor `bool` over the few remaining `boolean`s 2015-06-27 01:03:25 +00:00
class-wp-image-editor-imagick.php For doc block types, favor `bool` over the few remaining `boolean`s 2015-06-27 01:03:25 +00:00
class-wp-image-editor.php For doc block types, favor `bool` over the few remaining `boolean`s 2015-06-27 01:03:25 +00:00
class-wp-theme.php Add `@static*` annotations where they are missing. 2015-05-29 15:43:29 +00:00
class-wp-walker.php Cleanup missing doc blocks for `class-wp-walker.php`. 2015-05-22 17:59:25 +00:00
class-wp-xmlrpc-server.php XML-RPC: Only escape what we need to in `wp.editPage`, this allows for passwords with the special characters `"'` to work in a request. 2015-06-29 02:07:23 +00:00
class-wp.php Parse request: Quote regular expression characters in home path. 2015-06-08 13:29:26 +00:00
class.wp-dependencies.php For doc block types, favor `bool` over the few remaining `boolean`s 2015-06-27 01:03:25 +00:00
class.wp-scripts.php After [32656], add `@access` annotations to methods that have no doc block in `wp-includes/*`. 2015-05-29 21:37:24 +00:00
class.wp-styles.php Pass stylesheet URL as an argument to 'style_loader_tag' filter. 2015-06-21 19:35:26 +00:00
comment-template.php Remove allowed tags from comment form. 2015-06-19 14:15:26 +00:00
comment.php For doc block types, favor `bool` over the few remaining `boolean`s 2015-06-27 01:03:25 +00:00
compat.php Add doc blocks to functions that are missing them. 2015-05-31 03:18:25 +00:00
cron.php Fix inline documentation syntax in `wp_xmlrpc_server`. 2015-05-25 06:25:25 +00:00
date.php Use HTTPS URLs for codex.wordpress.org. 2015-04-12 21:29:32 +00:00
default-constants.php Define `SCRIPT_DEBUG` early on every load, similarly to `WP_DEBUG`. Remove `defined( 'SCRIPT_DEBUG' )` checks. 2015-06-25 02:29:31 +00:00
default-filters.php Introducing Site Icon, favicon management for WordPress. 2015-06-29 12:58:25 +00:00
default-widgets.php Add a label to the content field in the Text Widget for screen readers. 2015-06-22 21:22:26 +00:00
deprecated.php For doc block types, favor `bool` over the few remaining `boolean`s 2015-06-27 01:03:25 +00:00
feed-atom-comments.php `if` is a statment, not a function. 2015-06-16 20:01:25 +00:00
feed-atom.php Introduce 'rss_tag_pre' action, which fires between the xml and rss tags in a feed. 2014-07-07 10:18:15 +00:00
feed-rdf.php Improve various hook and filter docs so they are correctly parsed for the code reference. 2014-12-06 21:32:24 +00:00
feed-rss.php Serve RSS feeds with the proper mime-type: `application/rss+xml`. The reason for hacking around browsers by using `text/xml` appears to no longer be relevant. 2015-05-09 06:39:24 +00:00
feed-rss2-comments.php Improve lastBuildDate timestamp in rss feeds 2015-06-14 18:37:24 +00:00
feed-rss2.php Improve lastBuildDate timestamp in rss feeds 2015-06-14 18:37:24 +00:00
feed.php Introducing Site Icon, favicon management for WordPress. 2015-06-29 12:58:25 +00:00
formatting.php Introducing Site Icon, favicon management for WordPress. 2015-06-29 12:58:25 +00:00
functions.php Add Deprecated Constructor Function 2015-06-28 14:56:24 +00:00
functions.wp-scripts.php After [32596] and [32597], ensure that `wp_scripts|styles()` is called to ensure an instance is created of `WP_Scripts|Styles()` before calling `->do_items()`. 2015-06-12 16:54:24 +00:00
functions.wp-styles.php After [32596] and [32597], ensure that `wp_scripts|styles()` is called to ensure an instance is created of `WP_Scripts|Styles()` before calling `->do_items()`. 2015-06-12 16:54:24 +00:00
general-template.php Introducing Site Icon, favicon management for WordPress. 2015-06-29 12:58:25 +00:00
http.php Add `@static*` annotations where they are missing. 2015-05-29 15:43:29 +00:00
kses.php Don't strip `\0` (backslash+zero) from post content for users without "unfiltered_html" 2015-06-19 18:47:27 +00:00
l10n.php `prep_atom_text_construct()` and `before_last_bar()` should strictly check against `false` when using `str(r)?pos()`. 2015-06-25 16:49:25 +00:00
link-template.php For doc block types, favor `bool` over the few remaining `boolean`s 2015-06-27 01:03:25 +00:00
load.php Add missing doc blocks to `load.php` 2015-05-26 18:53:27 +00:00
locale.php Make `WP_Locale::rtl_src_admin_notice()` translatable. 2015-06-30 20:21:24 +00:00
media-template.php Media modal: Use better descriptive text for "Remove" buttons. 2015-06-27 14:51:26 +00:00
media.php After [32866], fix doc blocks. 2015-06-25 21:02:25 +00:00
meta.php Avoid returning duplicate matches when using a meta query in `WP_User_Query`. 2015-06-09 17:42:28 +00:00
ms-blogs.php Fix doc blocks for `ms-*.php` files. 2015-05-26 21:51:31 +00:00
ms-default-constants.php Fix doc blocks for `ms-*.php` files. 2015-05-26 21:51:31 +00:00
ms-default-filters.php Fix doc blocks for `ms-*.php` files. 2015-05-26 21:51:31 +00:00
ms-deprecated.php `$status` shouldn't be loosely compared to `true` in `wp_xmlrpc_server::wp_deleteComment()`. 2015-06-12 17:48:26 +00:00
ms-files.php `if` is a statment, not a function. 2015-06-16 20:01:25 +00:00
ms-functions.php Remove an undeeded space concatenation from `wpmu_validate_user_signup()`. 2015-06-26 01:39:25 +00:00
ms-load.php Fix doc blocks for `ms-*.php` files. 2015-05-26 21:51:31 +00:00
ms-settings.php Move ms-load.php and ms-default-constants.php inclusion back to ms-settings.php to avoid breaking WP-CLI. 2014-06-30 23:50:15 +00:00
nav-menu-template.php In `wp_nav_menu()`, ensure that the `$menu` arg is populated when passed to filters. 2015-06-16 20:33:25 +00:00
nav-menu.php Customizer: Improve handling of posts with no title. 2015-06-20 19:50:26 +00:00
option.php In `get_site_option()` and `get_option()`, ensure that `$notoptions` is an array before writing to it. Prevents a flood of `Cannot use a scalar value as an array`, because `$notoptions` is otherwise set to the result of `wp_cache_get()`, which returns `mixed`. 2015-06-25 19:01:26 +00:00
pluggable-deprecated.php Improve the `@param` docs for `src/wp-includes/pluggable*`. 2014-11-30 22:19:25 +00:00
pluggable.php Fire the `check_admin_referer` action on failure as well as success. 2015-07-01 03:37:23 +00:00
plugin.php For doc block types, favor `bool` over the few remaining `boolean`s 2015-06-27 01:03:25 +00:00
post-formats.php Add missing doc blocks to `post-formats.php`. 2015-05-27 16:06:25 +00:00
post-template.php Customizer: Improve handling of posts with no title. 2015-06-20 19:50:26 +00:00
post-thumbnail-template.php Add missing doc blocks to `post-thumbnail-template.php`. 2015-05-27 16:29:28 +00:00
post.php Correct inline doc for `$public` in `register_post_status()`. 2015-06-19 22:35:25 +00:00
query.php Add missing doc blocks to `query.php`. 2015-05-27 18:15:25 +00:00
registration-functions.php
registration.php
revision.php `if` is a statment, not a function. 2015-06-16 20:01:25 +00:00
rewrite.php `WP_Rewrite::add_rule()` should strictly check against `false` when using `strpos()`. 2015-06-25 16:56:25 +00:00
rss-functions.php Don't rely on include_path to include files. 2013-09-25 00:18:11 +00:00
rss.php Deprecate php4 style constructors 2015-06-28 15:27:24 +00:00
script-loader.php Introducing Site Icon, favicon management for WordPress. 2015-06-29 12:58:25 +00:00
session.php Fix some internal types that are passed to functions to avoid changing the acceptable types passed as arguments to those functions: 2015-01-16 22:51:21 +00:00
shortcodes.php Check `is_callable()` in `do_shortcode_tag()`, not `add_shortcode()`. 2015-06-19 21:33:25 +00:00
taxonomy.php Introduce a `no_terms` label for taxonomies. This label is used when indicating that there are no terms in the given taxonomy associated with an object. 2015-06-25 00:16:27 +00:00
template-loader.php Add singular.php to template hierarchy 2015-06-18 19:01:26 +00:00
template.php Add singular.php to template hierarchy 2015-06-18 19:01:26 +00:00
theme.php Provide alt text for uploaded header images. 2015-06-29 21:32:26 +00:00
update.php Add missing doc blocks to `update.php`: 2015-05-28 15:29:28 +00:00
user.php When searching for users using the `search` arg in `get_users()`/`WP_User_Query`, also search the user's email, url, and display name. 2015-06-28 00:36:24 +00:00
vars.php Some doc blocks should use `bool` instead of `true|false` 2015-06-27 00:45:24 +00:00
version.php Fire the `check_admin_referer` action on failure as well as success. 2015-07-01 03:37:23 +00:00
widgets.php Deprecate php4 style constructors 2015-06-28 15:27:24 +00:00
wlwmanifest.xml The Pinking Shears stir from their slumber, awakened by what may seem, to those 2013-12-11 19:49:11 +00:00
wp-db.php wpdb: Make "WordPress database error:" translatable. 2015-06-30 20:00:25 +00:00
wp-diff.php Add a missing description for the `$_diff_threshold` property in the `WP_Text_Diff_Renderer_Table` class. 2015-01-29 11:36:22 +00:00