WordPress/wp-includes/js
whyisjake 1fcbdb46e6 Backporting several bug fixes.
- Query: Remove the static query property.
- HTTP API: Protect against hex interpretation.
- Filesystem API: Prevent directory travelersals when creating new folders.
- Administration: Ensure that admin referer nonce is valid.
- REST API: Send a Vary: Origin header on GET requests.
- Customizer: Properly sanitize background images.

Backports [46474], [46475], [46476], [46477], [46478], [46483], [46485] to the 4.2 branch.

Built from https://develop.svn.wordpress.org/branches/4.2@46500


git-svn-id: http://core.svn.wordpress.org/branches/4.2@46297 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2019-10-14 19:15:22 +00:00
..
crop
imgareaselect
jcrop
jquery WordPress 4.2 2015-04-23 16:26:10 +00:00
mediaelement External Libraries: Remove unnecessary / obsoleted MediaElement.js files. 2018-01-16 08:12:32 +00:00
plupload Media: Simplify upload error message construction. 2017-05-16 18:03:56 +00:00
swfupload Fix some documentation typos in various core files. 2014-08-13 03:56:17 +00:00
thickbox Update more instances of default admin blues and grays. 2015-04-05 21:20:27 +00:00
tinymce TinyMCE wpView: preserve HTML wrapped in shortcodes. 2015-07-17 22:02:26 +00:00
admin-bar.js Toolbar: Search item consistency for focus state and IE8. 2015-04-08 16:08:28 +00:00
admin-bar.min.js Toolbar: Search item consistency for focus state and IE8. 2015-04-08 16:08:28 +00:00
autosave.js Admin notices: Add more variety and make more generically usable. 2014-11-21 16:41:25 +00:00
autosave.min.js Admin notices: Add more variety and make more generically usable. 2014-11-21 16:41:25 +00:00
backbone.min.js Don't override minified libraries included in core 2015-04-07 04:38:25 +00:00
colorpicker.js
colorpicker.min.js Update the versions of several `devDependencies` in `package.json`. `grunt-cssjanus` has been updated to `0.2.2`, we no longer need the fork. Run `npm install` to receive updates for `node_modules` in the project root. 2014-01-29 04:43:30 +00:00
comment-reply.js
comment-reply.min.js
customize-base.js Customizer: [31885] actually hasn't fixed the `SecurityError`s. This one does. 2015-03-25 23:36:27 +00:00
customize-base.min.js Customizer: [31885] actually hasn't fixed the `SecurityError`s. This one does. 2015-03-25 23:36:27 +00:00
customize-loader.js Customizer: Avoid `SecurityError`s when the Customizer is embedded in an origin other than wp-admin. 2015-03-25 17:26:26 +00:00
customize-loader.min.js Customizer: Avoid `SecurityError`s when the Customizer is embedded in an origin other than wp-admin. 2015-03-25 17:26:26 +00:00
customize-models.js Customizer: Allow to skip cropping header images if image width is smaller than or equal to theme width. 2014-04-25 20:25:19 +00:00
customize-models.min.js Customizer: Allow to skip cropping header images if image width is smaller than or equal to theme width. 2014-04-25 20:25:19 +00:00
customize-preview-widgets.js Customizer: Introduce WP_Customize_Control::active() method to determine whether the control is relevant to the current context (i.e. to the current URL being previewed). 2014-07-09 23:58:16 +00:00
customize-preview-widgets.min.js Customizer: Introduce WP_Customize_Control::active() method to determine whether the control is relevant to the current context (i.e. to the current URL being previewed). 2014-07-09 23:58:16 +00:00
customize-preview.js Customizer: Add loading indicators for the Customizer preview. 2015-03-10 15:56:26 +00:00
customize-preview.min.js Customizer: Add loading indicators for the Customizer preview. 2015-03-10 15:56:26 +00:00
customize-views.js Customizer: Avoid hiding 'Remove' buttons unrelated to custom headers. 2014-05-06 04:14:14 +00:00
customize-views.min.js Customizer: Avoid hiding 'Remove' buttons unrelated to custom headers. 2014-05-06 04:14:14 +00:00
heartbeat.js Heartbeat: 2014-11-10 01:47:24 +00:00
heartbeat.min.js Heartbeat: 2014-11-10 01:47:24 +00:00
hoverIntent.js Update hoverIntent to 1.8.1. 2015-03-11 17:15:27 +00:00
hoverIntent.min.js Update hoverIntent to 1.8.1. 2015-03-11 17:15:27 +00:00
json2.js
json2.min.js
masonry.min.js Don't override minified libraries included in core 2015-04-07 04:38:25 +00:00
mce-view.js TinyMCE: Improve the previews for shortcodes. 2017-09-19 12:44:31 +00:00
mce-view.min.js TinyMCE: Improve the previews for shortcodes. 2017-09-19 12:44:31 +00:00
media-audiovideo.js Backporting several bug fixes. 2019-10-14 19:15:22 +00:00
media-audiovideo.min.js Backporting several bug fixes. 2019-10-14 19:15:22 +00:00
media-editor.js Avoid a PHP notice when adding an embed via Insert from URL. 2015-04-21 14:36:25 +00:00
media-editor.min.js Avoid a PHP notice when adding an embed via Insert from URL. 2015-04-21 14:36:25 +00:00
media-grid.js Backporting several bug fixes. 2019-10-14 19:15:22 +00:00
media-grid.min.js Backporting several bug fixes. 2019-10-14 19:15:22 +00:00
media-models.js Backporting several bug fixes. 2019-10-14 19:15:22 +00:00
media-models.min.js Backporting several bug fixes. 2019-10-14 19:15:22 +00:00
media-views.js Backporting several bug fixes. 2019-10-14 19:15:22 +00:00
media-views.min.js Backporting several bug fixes. 2019-10-14 19:15:22 +00:00
quicktags.js Editor: 2014-11-26 02:50:24 +00:00
quicktags.min.js Editor: 2014-11-26 02:50:24 +00:00
shortcode.js Correctly capitalize JavaScript throughout core docs. 2014-12-02 00:31:22 +00:00
shortcode.min.js Shortcode JS: Avoid errors when an escaped shortcode includes a newline between brackets. 2014-05-01 03:37:13 +00:00
swfobject.js
tw-sack.js
tw-sack.min.js Update the versions of several `devDependencies` in `package.json`. `grunt-cssjanus` has been updated to `0.2.2`, we no longer need the fork. Run `npm install` to receive updates for `node_modules` in the project root. 2014-01-29 04:43:30 +00:00
twemoji.js Emoji: 2015-04-01 02:39:28 +00:00
twemoji.min.js Emoji: 2015-04-01 02:39:28 +00:00
underscore.min.js Don't override minified libraries included in core 2015-04-07 04:38:25 +00:00
utils.js Fix the `wp-settings-*` cookies used in getUserSetting()/setUserSetting(). They should be set without `COOKIE_DOMAIN` to work properly for sub-domains. Fixes #29095. 2014-08-13 02:47:16 +00:00
utils.min.js Fix the `wp-settings-*` cookies used in getUserSetting()/setUserSetting(). They should be set without `COOKIE_DOMAIN` to work properly for sub-domains. Fixes #29095. 2014-08-13 02:47:16 +00:00
wp-a11y.js Add `wp.a11y.speak()` for audible alerts/updates in screen readers. Props afercia, GrahamArmfield (for the idea), iseulde. Fixes #31368. 2015-03-01 19:11:27 +00:00
wp-a11y.min.js Add `wp.a11y.speak()` for audible alerts/updates in screen readers. Props afercia, GrahamArmfield (for the idea), iseulde. Fixes #31368. 2015-03-01 19:11:27 +00:00
wp-ajax-response.js Replace flagrant instances of `.html('')` with `.empty()`. 2015-03-09 19:44:26 +00:00
wp-ajax-response.min.js Replace flagrant instances of `.html('')` with `.empty()`. 2015-03-09 19:44:26 +00:00
wp-auth-check.js Disable body scrolling when session expired log in modal is open. 2015-03-31 22:55:26 +00:00
wp-auth-check.min.js Disable body scrolling when session expired log in modal is open. 2015-03-31 22:55:26 +00:00
wp-backbone.js Update media-views and wp.Backbone.View for Backbone 1.1. 2014-02-13 07:36:13 +00:00
wp-backbone.min.js Update media-views and wp.Backbone.View for Backbone 1.1. 2014-02-13 07:36:13 +00:00
wp-emoji-loader.js Emoji: 2015-05-06 01:35:26 +00:00
wp-emoji-loader.min.js Emoji: 2015-05-06 01:35:26 +00:00
wp-emoji-release.min.js Emoji: do not try to replace emoji chars inside SVGs. 2015-07-17 20:17:27 +00:00
wp-emoji.js Emoji: do not try to replace emoji chars inside SVGs. 2015-07-17 20:17:27 +00:00
wp-emoji.min.js Emoji: do not try to replace emoji chars inside SVGs. 2015-07-17 20:17:27 +00:00
wp-list-revisions.js
wp-list-revisions.min.js
wp-lists.js Fix double avatars and JS errors when spamming/trashing comments. 2014-03-26 23:14:15 +00:00
wp-lists.min.js Fix double avatars and JS errors when spamming/trashing comments. 2014-03-26 23:14:15 +00:00
wp-pointer.js
wp-pointer.min.js
wp-util.js Improve `wp.media` documentation. 2014-11-05 19:39:22 +00:00
wp-util.min.js Update the versions of several `devDependencies` in `package.json`. `grunt-cssjanus` has been updated to `0.2.2`, we no longer need the fork. Run `npm install` to receive updates for `node_modules` in the project root. 2014-01-29 04:43:30 +00:00
wpdialog.js
wpdialog.min.js
wplink.js Editor: Prevent adding `javascript:` and `data:` URLs through the inline link dialog. 2017-09-19 10:19:28 +00:00
wplink.min.js Editor: Prevent adding `javascript:` and `data:` URLs through the inline link dialog. 2017-09-19 10:19:28 +00:00
zxcvbn-async.js
zxcvbn-async.min.js Update the versions of several `devDependencies` in `package.json`. `grunt-cssjanus` has been updated to `0.2.2`, we no longer need the fork. Run `npm install` to receive updates for `node_modules` in the project root. 2014-01-29 04:43:30 +00:00
zxcvbn.min.js