WordPress-C/WordPress
1
0
Fork 0
mirror of https://github.com/WordPress/WordPress.git synced 2025-02-22 22:45:39 +00:00
Code Issues Packages Projects Releases Wiki Activity
WordPress/wp-admin
History
John Blackbourn 547fd42bfe Hardening: Use a properly generated hash for the newbloguser key instead of a determinate substring. 
Merges [42258] to the 4.7 branch.

Built from https://develop.svn.wordpress.org/branches/4.7@42272


git-svn-id: http://core.svn.wordpress.org/branches/4.7@42101 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-11-29 16:17:35 +00:00
..
css
Customize: Auto-expand a widget area section when expanding the Widgets panel if there is only one registered sidebar and it is active.
2017-04-10 12:36:34 +00:00
images
Customize: Add a RTL version of "browser.png" for the site icon preview.
2016-07-05 11:32:29 +00:00
includes
Filesystem API: Ensure filenames are valid before attempting to unzip them to ensure malformed file paths don't cause issues.
2017-09-19 14:38:34 +00:00
js
Add nonce for updating file system credentials.
2017-05-16 14:51:35 +00:00
maint
I18N: Make the translator comment added in [37858] more explicit and consistent with other similar instances.
2016-07-04 13:10:30 +00:00
network
Administration: Switch to handle_network_bulk_actions-{$screen} for the bulk listing screen actions in the network admin area.
2016-10-26 14:37:29 +00:00
user
Docs: Standardize hook docs in wp-admin/* to use third-person singular verbs per the inline documentation standards for PHP.
2016-05-22 18:01:30 +00:00
about.php
Bump 4.7 branch to version 4.7.7.
2017-10-31 13:13:33 +00:00
admin-ajax.php
TinyMCE, inline link:
2016-07-26 23:24:28 +00:00
admin-footer.php
Hooks: Standardize naming of dynamic hooks to use interpolation vs concatenation.
2016-08-22 18:25:31 +00:00
admin-functions.php
Docs: Use 3-digit, x.x.x-style semantic versioning for _doing_it_wrong(), _deprecated_function(), _deprecated_argument(), and _deprecated_file() throughout core.
2016-07-06 12:40:29 +00:00
admin-header.php
I18n: Introduce more translator comments for strings that contain placeholders but don't have an accompanying translator comment.
2016-11-21 02:46:30 +00:00
admin-post.php
Spelling: Standardize on "front end"/"back end" (noun) and "front-end"/"back-end" (adjective).
2016-02-25 12:53:27 +00:00
admin.php
Hooks: Standardize naming of dynamic hooks to use interpolation vs concatenation.
2016-08-22 18:25:31 +00:00
async-upload.php
Text Changes: Unify permission error messages.
2016-06-29 15:16:29 +00:00
comment.php
Accessibility: Remove target=_blank from the comment/edit-comments help tabs links.
2016-10-04 06:54:30 +00:00
credits.php
About page: Add strings for 4.7 and make available for translation.
2016-12-02 22:45:15 +00:00
custom-background.php
Customize: Improve custom background properties UI.
2016-10-26 06:52:29 +00:00
custom-header.php
Themes: Improve support for placeholders in default headers.
2016-11-04 17:10:01 +00:00
customize.php
Customize: Ignore invalid customization sessions.
2017-05-16 12:14:35 +00:00
edit-comments.php
Administration: Standardise the docblocks for the handle_bulk_actions-* filters.
2016-10-26 14:45:29 +00:00
edit-form-advanced.php
I18n: Introduce more translator comments for strings that contain placeholders but don't have an accompanying translator comment.
2016-11-21 02:46:30 +00:00
edit-form-comment.php
Accessibility: Standardize the remove/delete/cancel links in the Menus screen and Publish meta boxes.
2016-09-17 15:39:30 +00:00
edit-link-form.php
Accessibility: Remove target=_blank from the help tab links on several admin screens.
2016-10-04 20:27:33 +00:00
edit-tag-form.php
Taxonomy/Users: Use correct escaping function for URLs.
2017-09-19 21:21:35 +00:00
edit-tags.php
Taxonomy: Redirect to current taxonomy when adding a term without AJAX.
2016-12-30 05:55:32 +00:00
edit.php
Accessibility: Remove inappropriate content from the Posts and Edit screens headings.
2016-10-27 20:39:39 +00:00
export.php
Accessibility: Remove target=_blank from the help tab links on several admin screens.
2016-10-04 20:27:33 +00:00
freedoms.php
About page: Add strings for 4.7 and make available for translation.
2016-12-02 22:45:15 +00:00
import.php
Accessibility: Remove target=_blank from the help tab links on several admin screens.
2016-10-04 20:27:33 +00:00
index.php
Drop the requirement for the entry points to WordPress to be parsable by PHP4.
2016-10-25 03:15:30 +00:00
install-helper.php
Docs: Add missing descriptions for the $wpdb global in DocBlocks all the places.
2015-10-14 23:44:25 +00:00
install.php
Login and Registration: Avoid a potentially incorrect value for the cookie hash on multisite installations that don't have a value in the siteurl network option.
2017-03-23 19:03:37 +00:00
link-add.php
Text Changes: Unify permission error messages.
2016-06-29 15:16:29 +00:00
link-manager.php
Administration: Standardise the docblocks for the handle_bulk_actions-* filters.
2016-10-26 14:45:29 +00:00
link-parse-opml.php
General: Check to see that the PHP-XML module is enabled before using XML functions.
2016-10-24 04:45:31 +00:00
link.php
Docs: Standardize capitalization of Ajax throughout core documentation per the core spelling guide.
2016-07-10 00:51:30 +00:00
load-scripts.php
Bootstrap: do not go gentle into that good night r38411, r38412, and parts of r38389.
2016-08-31 16:31:29 +00:00
load-styles.php
Bootstrap: do not go gentle into that good night r38411, r38412, and parts of r38389.
2016-08-31 16:31:29 +00:00
media-new.php
Accessibility: Remove target=_blank from the help tab links on several admin screens.
2016-10-04 20:27:33 +00:00
media-upload.php
Hooks: Standardize naming of dynamic hooks to use interpolation vs concatenation.
2016-08-22 18:25:31 +00:00
media.php
Accessibility: Remove target=_blank from the help tab links on several admin screens.
2016-10-04 20:27:33 +00:00
menu-header.php
Administration: Ensure collapse menu is usable with a keyboard
2016-11-04 17:18:57 +00:00
menu.php
Customize: Prevent links to customize.php from being generated which have query vars from wp_removable_query_args() present.
2017-03-25 13:35:38 +00:00
moderation.php
Don't rely on include_path to include files.
2013-09-25 00:18:11 +00:00
ms-admin.php
Don't rely on include_path to include files.
2013-09-25 00:18:11 +00:00
ms-delete-site.php
I18N: Introduce a locale-switching function.
2016-10-26 15:36:31 +00:00
ms-edit.php
Don't rely on include_path to include files.
2013-09-25 00:18:11 +00:00
ms-options.php
Don't rely on include_path to include files.
2013-09-25 00:18:11 +00:00
ms-sites.php
Don't rely on include_path to include files.
2013-09-25 00:18:11 +00:00
ms-themes.php
Don't rely on include_path to include files.
2013-09-25 00:18:11 +00:00
ms-upgrade-network.php
Don't rely on include_path to include files.
2013-09-25 00:18:11 +00:00
ms-users.php
Don't rely on include_path to include files.
2013-09-25 00:18:11 +00:00
my-sites.php
Multisite: Replace get_blog_details() in wp-admin/my-sites.php with get_site().
2016-10-19 06:02:29 +00:00
nav-menus.php
Customize: Prevent links to customize.php from being generated which have query vars from wp_removable_query_args() present.
2017-03-25 13:35:38 +00:00
network.php
Accessibility: Remove target=_blank from the help tab links in network.php.
2016-10-30 15:19:37 +00:00
options-discussion.php
I18n: Begin introducing translator comments for strings which include placeholders but no accompanying translator comment.
2016-11-21 01:22:32 +00:00
options-general.php
I18N: Show available timezones in the user's locale on the settings screen.
2016-11-01 09:16:31 +00:00
options-head.php
Docs: Standardize on 'backward compatibility/compatible' nomenclature in core inline docs.
2016-05-13 18:41:31 +00:00
options-media.php
Accessibility: Remove target=_blank from the Settings screens help tabs links.
2016-10-04 06:59:29 +00:00
options-permalink.php
Accessibility: Remove target=_blank from the Settings screens help tabs links.
2016-10-04 06:59:29 +00:00
options-reading.php
Accessibility: Remove target=_blank from the Settings screens help tabs links.
2016-10-04 06:59:29 +00:00
options-writing.php
Accessibility: Remove target=_blank from the Settings screens help tabs links.
2016-10-04 06:59:29 +00:00
options.php
Text Changes: Merge and clarify some permission error strings in the admin.
2016-11-19 01:38:31 +00:00
plugin-editor.php
General: Add missing URL-encoding and add extra hardening to plugin and template names when they're displayed in the admin area.
2017-09-19 10:21:48 +00:00
plugin-install.php
Plugin install: De-duplicate a conditional, introduced in [38172].
2016-11-21 21:33:30 +00:00
plugins.php
General: Add missing URL-encoding and add extra hardening to plugin and template names when they're displayed in the admin area.
2017-09-19 10:21:48 +00:00
post-new.php
I18N: Combine two duplicate "Invalid post type" strings.
2016-07-17 16:05:31 +00:00
post.php
Text Changes: Unify permission error messages.
2016-06-29 15:16:29 +00:00
press-this.php
Bootstrap: do not go gentle into that good night r38411, r38412, and parts of r38389.
2016-08-31 16:31:29 +00:00
profile.php
Don't rely on include_path to include files.
2013-09-25 00:18:11 +00:00
revision.php
I18n: Begin introducing translator comments for strings which include placeholders but no accompanying translator comment.
2016-11-21 01:22:32 +00:00
setup-config.php
Drop the requirement for the entry points to WordPress to be parsable by PHP4.
2016-10-25 03:15:30 +00:00
term.php
Taxonomy: Introduce more fine grained capabilities for managing taxonomy terms.
2016-09-30 22:40:28 +00:00
theme-editor.php
General: Add missing URL-encoding and add extra hardening to plugin and template names when they're displayed in the admin area.
2017-09-19 10:21:48 +00:00
theme-install.php
I18N: Move the support forums URL in update-related HTTP API error messages to a separate translatable string that is already used elsewhere.
2016-11-21 01:52:32 +00:00
themes.php
I18N: Merge two 'ERROR:' strings.
2016-11-19 01:09:30 +00:00
tools.php
Accessibility: Remove target=_blank from the Plugins, Themes, Media, Update, and Tools screens help tabs links.
2016-10-04 07:08:29 +00:00
update-core.php
Updates: Translate plugin data on the Updates screen.
2017-01-11 11:39:34 +00:00
update.php
Bootstrap: do not go gentle into that good night r38411, r38412, and parts of r38389.
2016-08-31 16:31:29 +00:00
upgrade-functions.php
Docs: Use 3-digit, x.x.x-style semantic versioning for _doing_it_wrong(), _deprecated_function(), _deprecated_argument(), and _deprecated_file() throughout core.
2016-07-06 12:40:29 +00:00
upgrade.php
Install/Upgrade: Keep indexing bots away until a site is ready to be seen.
2015-12-08 21:56:27 +00:00
upload.php
Administration: Standardise the docblocks for the handle_bulk_actions-* filters.
2016-10-26 14:45:29 +00:00
user-edit.php
Taxonomy/Users: Use correct escaping function for URLs.
2017-09-19 21:21:35 +00:00
user-new.php
Hardening: Use a properly generated hash for the newbloguser key instead of a determinate substring.
2017-11-29 16:17:35 +00:00
users.php
Text Changes: Merge strings referring to list_users capability.
2016-11-19 02:16:30 +00:00
widgets.php
Customize: Prevent links to customize.php from being generated which have query vars from wp_removable_query_args() present.
2017-03-25 13:35:38 +00:00