WordPress-C/WordPress
1
0
Fork 0
mirror of https://github.com/WordPress/WordPress.git synced 2025-02-20 13:38:37 +00:00
Code Issues Packages Projects Releases Wiki Activity
WordPress/wp-includes
History
whyisjake 317465e2fe Prevent stored XSS in the block editor. 
Prevent escaped unicode characters become unescaped in unsafe HTML during JSON decoding.

Props: aduth, epiqueras, 

Built from https://develop.svn.wordpress.org/trunk@46896


git-svn-id: http://core.svn.wordpress.org/trunk@46696 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-12-12 18:02:03 +00:00
..
blocks
Docs: Remove some funky nested filters.
2019-10-28 19:04:05 +00:00
certificates
…
css
Administration: Standardize form control height and alignment across the admin.
2019-12-09 20:26:03 +00:00
customize
Docs: Correct various docblocks documentation.
2019-12-06 22:23:04 +00:00
fonts
…
ID3
…
images
…
IXR
…
js
Fixes in admin-bar.js:
2019-12-11 18:56:03 +00:00
pomo
Docs: Correct spelling of "subclass" and "overridden" in various docblocks and error messages.
2019-11-17 07:43:01 +00:00
random_compat
…
Requests
…
rest-api
Ensure that a user can publish_posts before making a post sticky.
2019-12-12 17:52:02 +00:00
SimplePie
…
sodium_compat
Upgrade/Install: Update sodium_compat to v1.12.1.
2019-12-09 16:42:04 +00:00
Text
…
theme-compat
Docs: Correct some more invalid inline docs.
2019-10-31 21:20:02 +00:00
widgets
Docs: Correct various docblocks documentation.
2019-12-06 22:23:04 +00:00
admin-bar.php
Toolbar: Use add_node() instead of add_menu() in core.
2019-11-03 22:14:01 +00:00
atomlib.php
…
author-template.php
…
blocks.php
Prevent stored XSS in the block editor.
2019-12-12 18:02:03 +00:00
bookmark-template.php
…
bookmark.php
Docs: Further improve documentation of known return types, plus other docs fixes.
2019-11-05 21:27:02 +00:00
cache.php
…
canonical.php
…
capabilities.php
Docs: Use the {@see ...} tag for the replacement in @deprecated tags, so that Developer Reference could automatically link to the replacement.
2019-11-09 13:05:02 +00:00
category-template.php
Docs: Increase the specificity of various docblock parameter types and return types.
2019-12-06 22:43:04 +00:00
category.php
Docs: Update description for get_categories() to avoid suggesting the deprecated type argument.
2019-12-12 16:47:05 +00:00
class-feed.php
…
class-http.php
Coding Standards: Fix WPCS issue in [46690].
2019-11-10 01:45:02 +00:00
class-IXR.php
…
class-json.php
Docs: Correct @see references for PHP 4 constructors in wp-includes/class-json.php.
2019-11-02 20:13:02 +00:00
class-oembed.php
…
class-phpass.php
Docs: Update URLs in some @link tags and switch them to HTTPS.
2019-11-01 14:57:02 +00:00
class-phpmailer.php
…
class-pop3.php
…
class-requests.php
Docs: Further improve documentation of known return types, plus other docs fixes.
2019-11-05 21:27:02 +00:00
class-simplepie.php
…
class-smtp.php
…
class-snoopy.php
…
class-walker-category-dropdown.php
…
class-walker-category.php
…
class-walker-comment.php
…
class-walker-nav-menu.php
…
class-walker-page-dropdown.php
…
class-walker-page.php
…
class-wp-admin-bar.php
Toolbar: Properly escape the onclick attribute.
2019-11-15 23:24:02 +00:00
class-wp-ajax-response.php
…
class-wp-block-parser.php
…
class-wp-block-styles-registry.php
Editor: Fix typo in an error message in WP_Block_Styles_Registry::register().
2019-10-27 14:09:02 +00:00
class-wp-block-type-registry.php
…
class-wp-block-type.php
…
class-wp-comment-query.php
…
class-wp-comment.php
Docs: Further improve documentation of known return types, plus other docs fixes.
2019-11-05 21:27:02 +00:00
class-wp-customize-control.php
…
class-wp-customize-manager.php
Docs: Correct various docblocks documentation.
2019-12-06 22:23:04 +00:00
class-wp-customize-nav-menus.php
Docs: Increase the specificity of various docblock parameter types and return types.
2019-12-06 22:43:04 +00:00
class-wp-customize-panel.php
…
class-wp-customize-section.php
Customize: Formally deprecate unused Customizer classes.
2019-11-03 16:48:00 +00:00
class-wp-customize-setting.php
Docs: Move the @link tag for Customize API in WP_Customize_Manager::add_setting() and WP_Customize_Setting to a more appropriate place.
2019-11-10 01:43:02 +00:00
class-wp-customize-widgets.php
Docs: In various @return tags, list the expected type first, instead of WP_Error.
2019-11-11 02:43:03 +00:00
class-wp-date-query.php
…
class-wp-dependency.php
…
class-wp-editor.php
Editor: Pass $editor_id parameter to tiny_mce_plugins, mce_external_plugins, and mce_external_languages filters, for consistency with teeny_mce_plugins.
2019-11-16 16:36:02 +00:00
class-wp-embed.php
Docs: Further improve documentation of known return types, plus other docs fixes.
2019-11-05 21:27:02 +00:00
class-wp-error.php
…
class-wp-fatal-error-handler.php
…
class-wp-feed-cache-transient.php
…
class-wp-feed-cache.php
…
class-wp-hook.php
Docs: Correct @param type for the function parameter in tests_add_filter() and _test_filter_build_unique_id().
2019-11-29 21:42:01 +00:00
class-wp-http-cookie.php
…
class-wp-http-curl.php
…
class-wp-http-encoding.php
Docs: Switch more docs over to typed array notation, plus some fixes.
2019-10-26 21:09:04 +00:00
class-wp-http-ixr-client.php
…
class-wp-http-proxy.php
…
class-wp-http-requests-hooks.php
…
class-wp-http-requests-response.php
…
class-wp-http-response.php
…
class-wp-http-streams.php
…
class-wp-image-editor-gd.php
Docs: In various @return tags, list the expected type first, instead of WP_Error.
2019-11-11 02:43:03 +00:00
class-wp-image-editor-imagick.php
Docs: In various @return tags, list the expected type first, instead of WP_Error.
2019-11-11 02:43:03 +00:00
class-wp-image-editor.php
Docs: Correct spelling of "subclass" and "overridden" in various docblocks and error messages.
2019-11-17 07:43:01 +00:00
class-wp-list-util.php
…
class-wp-locale-switcher.php
…
class-wp-locale.php
…
class-wp-matchesmapregex.php
…
class-wp-meta-query.php
Docs: Increase the specificity of various docblock parameter types and return types.
2019-12-06 22:43:04 +00:00
class-wp-metadata-lazyloader.php
…
class-wp-network-query.php
…
class-wp-network.php
…
class-wp-oembed-controller.php
Docs: In various @return tags, list the expected type first, instead of WP_Error.
2019-11-11 02:43:03 +00:00
class-wp-oembed.php
Embeds: Remove CollegeHumor oEmbed provider, as the service does not exist anymore.
2019-11-23 10:15:03 +00:00
class-wp-paused-extensions-storage.php
…
class-wp-post-type.php
…
class-wp-post.php
…
class-wp-query.php
Docs: Further improve documentation of known return types, plus other docs fixes.
2019-11-05 21:27:02 +00:00
class-wp-recovery-mode-cookie-service.php
…
class-wp-recovery-mode-email-service.php
Docs: Further improve documentation of known return types, plus other docs fixes.
2019-11-05 21:27:02 +00:00
class-wp-recovery-mode-key-service.php
…
class-wp-recovery-mode-link-service.php
…
class-wp-recovery-mode.php
…
class-wp-rewrite.php
Docs: Use the {@see ...} tag for the replacement in @deprecated tags, so that Developer Reference could automatically link to the replacement.
2019-11-09 13:05:02 +00:00
class-wp-role.php
Docs: Switch more docs over to typed array notation, plus some fixes.
2019-10-26 21:09:04 +00:00
class-wp-roles.php
Docs: Switch more docs over to typed array notation, plus some fixes.
2019-10-26 21:09:04 +00:00
class-wp-session-tokens.php
…
class-wp-simplepie-file.php
…
class-wp-simplepie-sanitize-kses.php
…
class-wp-site-query.php
…
class-wp-site.php
…
class-wp-tax-query.php
…
class-wp-taxonomy.php
Taxonomy: Correct the initial value for WP_Taxonomy::$labels to match get_taxonomy_labels() return type.
2019-11-18 07:58:59 +00:00
class-wp-term-query.php
Docs: Correct and improve the readability of some parameters of WP_Term_Query.
2019-11-04 17:50:02 +00:00
class-wp-term.php
…
class-wp-text-diff-renderer-inline.php
…
class-wp-text-diff-renderer-table.php
Docs: Correct some invalid hook docblocks.
2019-11-12 22:42:02 +00:00
class-wp-theme.php
Docs: Clarify that WP_Theme::get(), ::display(), and several related methods treat the Tags theme header as an array.
2019-11-20 08:31:03 +00:00
class-wp-user-meta-session-tokens.php
…
class-wp-user-query.php
…
class-wp-user-request.php
…
class-wp-user.php
Docs: Further improve documentation of known return types, plus other docs fixes.
2019-11-05 21:27:02 +00:00
class-wp-walker.php
…
class-wp-widget-factory.php
Widgets: Remove WP_Widget_Factory::$hashed_class_counts property, unused since [46220].
2019-12-01 12:13:01 +00:00
class-wp-widget.php
Docs: Correct spelling of "subclass" and "overridden" in various docblocks and error messages.
2019-11-17 07:43:01 +00:00
class-wp-xmlrpc-server.php
Date/Time: XML-RPC: Сalculate the proper offset for GMT in wp.newPost, wp.editComment, mw.newPost, mw.editPost when post_date or comment_date is set.
2019-12-09 19:56:05 +00:00
class-wp.php
Docs: Use the {@see ...} tag for the replacement in @deprecated tags, so that Developer Reference could automatically link to the replacement.
2019-11-09 13:05:02 +00:00
class.wp-dependencies.php
Docs: Further improve documentation of known return types, plus other docs fixes.
2019-11-05 21:27:02 +00:00
class.wp-scripts.php
Docs: Further improve documentation of known return types, plus other docs fixes.
2019-11-05 21:27:02 +00:00
class.wp-styles.php
Docs: Further improve documentation of known return types, plus other docs fixes.
2019-11-05 21:27:02 +00:00
comment-template.php
Comments: Avoid a PHP notice in comment_form() if the email field is not set.
2019-12-11 22:14:02 +00:00
comment.php
Docs: Increase the specificity of various docblock parameter types and return types.
2019-12-06 22:43:04 +00:00
compat.php
…
cron.php
…
date.php
…
default-constants.php
…
default-filters.php
Prevent stored XSS in the block editor.
2019-12-12 18:02:03 +00:00
default-widgets.php
…
deprecated.php
Taxonomy: Remove redundant caching from get_all_category_ids(), deprecated in favor of get_terms() in [28679].
2019-12-02 14:49:01 +00:00
embed-template.php
…
embed.php
Docs: Improve documentation of known return types, plus other docs fixes.
2019-11-05 21:23:02 +00:00
error-protection.php
…
feed-atom-comments.php
…
feed-atom.php
…
feed-rdf.php
…
feed-rss2-comments.php
…
feed-rss2.php
…
feed-rss.php
…
feed.php
Docs: Increase the specificity of various docblock parameter types and return types.
2019-12-06 22:43:04 +00:00
formatting.php
Prevent stored XSS in the block editor.
2019-12-12 18:02:03 +00:00
functions.php
Date/Time: When determining whether to decline the month name in wp_maybe_decline_date(), take word boundaries into account.
2019-12-09 18:50:06 +00:00
functions.wp-scripts.php
Docs: Improve documentation of known return types, plus other docs fixes.
2019-11-05 21:23:02 +00:00
functions.wp-styles.php
Docs: Correct the documentation placement for wp_print_styles and shortcode_atts_{$shortcode} hooks.
2019-11-09 13:43:01 +00:00
general-template.php
Docs: Increase the specificity of various docblock parameter types and return types.
2019-12-06 22:43:04 +00:00
http.php
Docs: In various @return tags, list the expected type first, instead of WP_Error.
2019-11-11 02:43:03 +00:00
kses.php
Update wp_kses_bad_protocol() to recognize : on uri attributes,
2019-12-12 17:55:05 +00:00
l10n.php
Docs: Improve documentation of known return types, plus other docs fixes.
2019-11-05 21:23:02 +00:00
link-template.php
Docs: Increase the specificity of various docblock parameter types and return types.
2019-12-06 22:43:04 +00:00
load.php
Docs: Adjust wp_is_json_request() and wp_is_xml_request() return value descriptions for consistency.
2019-11-22 18:28:04 +00:00
locale.php
…
media-template.php
Accessibility: Add an aria-current attribute to the Media Library switch links.
2019-11-18 16:51:02 +00:00
media.php
Media: Avoid a PHP notice in image_downsize() when trying to replace a non-image URL with a rendered image from its meta.
2019-11-25 10:07:02 +00:00
meta.php
Docs: Improve documentation of known return types, plus other docs fixes.
2019-11-05 21:23:02 +00:00
ms-blogs.php
Docs: Increase the specificity of various docblock parameter types and return types.
2019-12-06 22:43:04 +00:00
ms-default-constants.php
…
ms-default-filters.php
…
ms-deprecated.php
Docs: Improve documentation of known return types, plus other docs fixes.
2019-11-05 21:23:02 +00:00
ms-files.php
…
ms-functions.php
REST API: Use strict in_array() checks for the list of usernames blacklisted via illegal_user_logins filter.
2019-11-29 22:04:02 +00:00
ms-load.php
Docs: Improve documentation of known return types, plus other docs fixes.
2019-11-05 21:23:02 +00:00
ms-network.php
…
ms-settings.php
…
ms-site.php
Docs: Use the {@see ...} tag for the replacement in @deprecated tags, so that Developer Reference could automatically link to the replacement.
2019-11-09 13:05:02 +00:00
nav-menu-template.php
Docs: Switch more docs over to typed array notation, plus some fixes.
2019-10-26 21:09:04 +00:00
nav-menu.php
Docs: Increase the specificity of various docblock parameter types and return types.
2019-12-06 22:43:04 +00:00
option.php
Options, Meta APIs: Update @since version for the $force_cache parameter added for wp_load_alloptions() in [46753] to 5.3.1.
2019-11-25 13:44:02 +00:00
pluggable-deprecated.php
…
pluggable.php
Comments: Optimize the query for pending comments count in wp_notify_moderator() for better performance on large tables.
2019-12-10 13:47:00 +00:00
plugin.php
Plugins: In _wp_filter_build_unique_id(), remove $wp_filter global and $filter_id_count static variable, unused since [46220].
2019-11-29 22:14:01 +00:00
post-formats.php
Docs: Increase the specificity of various docblock parameter types and return types.
2019-12-06 22:43:04 +00:00
post-template.php
Docs: Miscellaneous docblock corrections.
2019-10-28 19:48:01 +00:00
post-thumbnail-template.php
…
post.php
Docs: In various @return tags, list the expected type first, instead of WP_Error.
2019-11-11 02:43:03 +00:00
query.php
Docs: Improve documentation of known return types, plus other docs fixes.
2019-11-05 21:23:02 +00:00
registration-functions.php
…
registration.php
…
rest-api.php
Docs: In various @return tags, list the expected type first, instead of WP_Error.
2019-11-11 02:43:03 +00:00
revision.php
Docs: Correct various docblocks documentation.
2019-12-06 22:23:04 +00:00
rewrite.php
…
rss-functions.php
…
rss.php
…
script-loader.php
Coding Standards: Fix WPCS and JSHint issues in [46872].
2019-12-10 01:34:01 +00:00
session.php
…
shortcodes.php
Docs: Correct the documentation placement for wp_print_styles and shortcode_atts_{$shortcode} hooks.
2019-11-09 13:43:01 +00:00
spl-autoload-compat.php
…
taxonomy.php
Docs: Increase the specificity of various docblock parameter types and return types.
2019-12-06 22:43:04 +00:00
template-loader.php
…
template.php
…
theme.php
Docs: Correct various docblocks documentation.
2019-12-06 22:23:04 +00:00
update.php
…
user.php
Docs: Increase the specificity of various docblock parameter types and return types.
2019-12-06 22:43:04 +00:00
vars.php
…
version.php
Prevent stored XSS in the block editor.
2019-12-12 18:02:03 +00:00
widgets.php
…
wlwmanifest.xml
…
wp-db.php
Docs: In various @return tags, list the expected type first, instead of WP_Error.
2019-11-11 02:43:03 +00:00
wp-diff.php
…