davidbaumwald 3d3eb43612 Grouped backports to the 4.4 branch. ...

- Comments: Prevent users who can not see a post from seeing comments on it.
- Shortcodes: Restrict media shortcode ajax to certain type.
- REST API: Ensure no-cache headers are sent when methods are overridden.
- Prevent unintended behavior when certain objects are unserialized.

Merges [56834], [56835], [56836], and [56838] to the 4.4 branch.
Props xknown, jorbin, joehoyle, timothyblynjacobs, peterwilsoncc, ehtis, tykoted, antpb, rmccue.
Built from https://develop.svn.wordpress.org/branches/4.4@56855


git-svn-id: http://core.svn.wordpress.org/branches/4.4@56366 1a063a9b-81f0-0310-95a4-ce76da25c4cd

2023-10-12 18:09:23 +00:00

..

css

Build/Test Tools: Support NodeJS 14.x in the 4.4 branch.

2021-02-05 04:23:43 +00:00

images

Squish that .png a bit more. See [32994].

2015-06-30 22:04:25 +00:00

includes

Grouped backports to the 4.4 branch.

2023-10-12 18:09:23 +00:00

js

Build/Test Tools: Support NodeJS 14.x in the 4.4 branch.

2021-02-05 04:23:43 +00:00

maint

Install/Upgrade: Keep indexing bots away until a site is ready to be seen.

2015-12-08 22:02:27 +00:00

network

General: WordPress updates

2020-10-29 19:04:23 +00:00

user

…

about.php

Grouped backports to the 4.4 branch.

2023-05-16 15:38:21 +00:00

admin-ajax.php

Themes: Add a Favorites tab to the Add Themes screen.

2015-11-04 21:49:26 +00:00

admin-footer.php

Add @global annotations for wp-admin/*.

2015-05-28 21:41:30 +00:00

admin-functions.php

…

admin-header.php

General: WordPress updates

2020-10-29 19:04:23 +00:00

admin-post.php

Superglobals: Revert [34059] until further notice.

2015-09-17 12:33:26 +00:00

admin.php

Use wp_installing() instead of WP_INSTALLING constant.

2015-10-05 15:06:28 +00:00

async-upload.php

Escape the output in wp_ajax_upload_attachment().

2019-09-04 16:38:22 +00:00

comment.php

I18N: Remove <a> tag from translatable string in wp-admin/comment.php.

2015-11-18 17:33:30 +00:00

credits.php

About: Sync tagline from about page with credits and freedoms.

2015-12-07 16:59:27 +00:00

custom-background.php

General: WordPress updates

2020-10-29 19:04:23 +00:00

custom-header.php

General: WordPress updates

2020-10-29 19:04:23 +00:00

customize.php

Customize: Ignore invalid customization sessions.

2017-05-16 12:17:32 +00:00

edit-comments.php

Add translator comments for strings in wp-admin/edit-comments.php.

2015-11-06 00:23:25 +00:00

edit-form-advanced.php

Revert [34917] until the broken test is fixed.

2015-10-08 01:04:25 +00:00

edit-form-comment.php

Bump the "Status" H3 heading to H2 on the Edit Comment screen for better accessibility.

2015-10-14 17:44:24 +00:00

edit-link-form.php

Bump H3 headings to H2 on the legacy Link Manager screen for better accessibility.

2015-10-14 17:32:24 +00:00

edit-tag-form.php

Taxonomy/Users: Use correct escaping function for URLs.

2017-09-19 21:33:30 +00:00

edit-tags.php

After [34891], rename new post type and taxonomy label keys to match the default strings.

2015-10-23 16:48:25 +00:00

edit.php

After [34891], rename new post type and taxonomy label keys to match the default strings.

2015-10-23 16:48:25 +00:00

export.php

Export: add missing labels and improvement accessibility of the Export screen.

2015-10-21 03:57:24 +00:00

freedoms.php

About: Sync tagline from about page with credits and freedoms.

2015-12-07 16:59:27 +00:00

import.php

Proper heading for admin screens.

2015-06-27 15:41:25 +00:00

index.php

Replace some hyphens with —s in admin help tabs.

2015-08-19 04:53:25 +00:00

install-helper.php

Docs: Add missing descriptions for the $wpdb global in DocBlocks all the places.

2015-10-14 23:44:25 +00:00

install.php

Install/Upgrade: Keep indexing bots away until a site is ready to be seen.

2015-12-08 22:02:27 +00:00

link-add.php

…

link-manager.php

List Tables/WP_Screen: in WP_Screen, add methods to store, retrieve, and render screen reader text, primarily used by list table screens.

2015-10-07 01:28:25 +00:00

link-parse-opml.php

Add @global annotations for wp-admin/*.

2015-05-28 21:41:30 +00:00

link.php

…

load-scripts.php

Create a new file, wp-admin/includes/noop.php, which loads all of the noop functions for load-script|styles.php and is only loaded by those files. DRYs in the process.

2015-09-11 05:04:23 +00:00

load-styles.php

Create a new file, wp-admin/includes/noop.php, which loads all of the noop functions for load-script|styles.php and is only loaded by those files. DRYs in the process.

2015-09-11 05:04:23 +00:00

media-new.php

General: WordPress updates

2020-10-29 19:04:23 +00:00

media-upload.php

Provide more helful feedback than just "Cheatin' uh?" for permission errors in wp-admin/media-upload.php.

2015-09-02 16:21:21 +00:00

media.php

Use a less element-specific class name for links within page titles.

2015-07-03 16:42:24 +00:00

menu-header.php

Docs: Document declaration of the $submenu_file global in wp-admin/menu-header.php.

2015-10-01 01:48:25 +00:00

menu.php

Eliminate a db query when building the admin menu for non-privileged users.

2015-11-18 21:34:26 +00:00

moderation.php

…

ms-admin.php

…

ms-delete-site.php

Trim trailing space from string in site delete confirmation

2015-07-01 16:31:25 +00:00

ms-edit.php

…

ms-options.php

…

ms-sites.php

…

ms-themes.php

…

ms-upgrade-network.php

…

ms-users.php

…

my-sites.php

My Sites: Make "Create a New Site" link consistent with other "Add New" links.

2015-10-09 03:50:24 +00:00

nav-menus.php

Customizer: Use correct context and translator comments for menu location strings.

2015-11-20 17:46:25 +00:00

network.php

Network Setup: don't use <code> in translation strings in wp-admin/network files.

2015-09-18 18:18:27 +00:00

options-discussion.php

Don't force comment pagination.

2015-10-21 16:26:42 +00:00

options-general.php

Revert [35336] and [35337].

2015-11-18 20:30:25 +00:00

options-head.php

…

options-media.php

Remove <code> tag from translatable string in wp-admin/options-media.php.

2015-11-06 00:28:25 +00:00

options-permalink.php

Permalinks: Use "Plain" instead of "None" for the ?p-###, which is still a valid permalink structure, just not a "pretty" one.

2015-11-10 22:19:27 +00:00

options-reading.php

Move ad hoc Options functions to wp-admin/includes/options.php:

2015-09-10 21:45:24 +00:00

options-writing.php

Revert [34778], continue using _site_option() for the current network.

2015-10-07 17:11:25 +00:00

options.php

Revert [35336] and [35337].

2015-11-18 20:30:25 +00:00

plugin-editor.php

General: Add missing URL-encoding and add extra hardening to plugin and template names when they're displayed in the admin area.

2017-09-19 12:13:31 +00:00

plugin-install.php

List Tables/WP_Screen: in WP_Screen, add methods to store, retrieve, and render screen reader text, primarily used by list table screens.

2015-10-07 01:28:25 +00:00

plugins.php

Grouped backports to the 4.4 branch.

2022-08-30 15:50:21 +00:00

post-new.php

Provide more helpful feedback than just "Cheatin' uh?" for permission errors in wp-admin/post-new.php.

2015-09-02 18:36:22 +00:00

post.php

Editor: Remove unwanted fields before saving posts.

2018-12-13 01:49:19 +00:00

press-this.php

Provide more helpful feedback than just "Cheatin' uh?" for permission errors in wp-admin/press-this.php.

2015-09-02 18:38:21 +00:00

profile.php

…

revision.php

Revisions: Change the capability needed to view revision diffs to edit_post.

2016-06-21 14:32:27 +00:00

setup-config.php

Install/Upgrade: Keep indexing bots away until a site is ready to be seen.

2015-12-08 22:02:27 +00:00

theme-editor.php

General: Add missing URL-encoding and add extra hardening to plugin and template names when they're displayed in the admin area.

2017-09-19 12:13:31 +00:00

theme-install.php

Add Nonce to updating wporg_favorites user meta field

2016-03-30 18:41:26 +00:00

themes.php

General: Backport several commits for release.

2020-06-10 18:54:30 +00:00

tools.php

Bump H3 headings to H2 on Tools screen for better accessibility.

2015-08-31 03:32:21 +00:00

update-core.php

Updates: Translate plugin data on the Updates screen.

2017-01-11 11:41:31 +00:00

update.php

Plugins: Don't request all fields via plugins_api( 'plugin_information' ) for plugin installs and update checks.

2015-09-26 15:50:25 +00:00

upgrade-functions.php

…

upgrade.php

Install/Upgrade: Keep indexing bots away until a site is ready to be seen.

2015-12-08 22:02:27 +00:00

upload.php

List Tables/WP_Screen: in WP_Screen, add methods to store, retrieve, and render screen reader text, primarily used by list table screens.

2015-10-07 01:28:25 +00:00

user-edit.php

Taxonomy/Users: Use correct escaping function for URLs.

2017-09-19 21:33:30 +00:00

user-new.php

Hardening: Use a properly generated hash for the newbloguser key instead of a determinate substring.

2017-11-29 16:28:31 +00:00

users.php

Users: When determining whether to show the reassign content option during user delete, don't rely upon WP_Query as it doesn't return all forms of content wp_delete_user() operates on.

2015-12-27 02:17:21 +00:00

widgets.php

Add nonce for widget accessibility mode.

2017-01-11 01:45:31 +00:00