John Blackbourn 5e87d63b30 Filesystem API: Ensure filenames are valid before attempting to unzip them to ensure malformed file paths don't cause issues. ...

Merges [41457] to the 4.4 branch.

Built from https://develop.svn.wordpress.org/branches/4.4@41462


git-svn-id: http://core.svn.wordpress.org/branches/4.4@41295 1a063a9b-81f0-0310-95a4-ce76da25c4cd

2017-09-19 14:42:01 +00:00

..

css

About Page: Add release video and update post embed.

2015-12-08 23:29:26 +00:00

images

Squish that .png a bit more. See [32994].

2015-06-30 22:04:25 +00:00

includes

Filesystem API: Ensure filenames are valid before attempting to unzip them to ensure malformed file paths don't cause issues.

2017-09-19 14:42:01 +00:00

js

Add nonce for updating file system credentials.

2017-05-16 14:55:30 +00:00

maint

Install/Upgrade: Keep indexing bots away until a site is ready to be seen.

2015-12-08 22:02:27 +00:00

network

Multisite: Improve escaping in network settings.

2016-03-30 16:01:27 +00:00

user

…

about.php

Bump 4.7 branch to version 4.4.10.

2017-05-16 21:51:30 +00:00

admin-ajax.php

Themes: Add a Favorites tab to the Add Themes screen.

2015-11-04 21:49:26 +00:00

admin-footer.php

Add @global annotations for wp-admin/*.

2015-05-28 21:41:30 +00:00

admin-functions.php

…

admin-header.php

Correct the title used on the user dashboard.

2015-06-24 00:37:28 +00:00

admin-post.php

Superglobals: Revert [34059] until further notice.

2015-09-17 12:33:26 +00:00

admin.php

Use wp_installing() instead of WP_INSTALLING constant.

2015-10-05 15:06:28 +00:00

async-upload.php

Superglobals: Revert [34059] until further notice.

2015-09-17 12:33:26 +00:00

comment.php

I18N: Remove <a> tag from translatable string in wp-admin/comment.php.

2015-11-18 17:33:30 +00:00

credits.php

About: Sync tagline from about page with credits and freedoms.

2015-12-07 16:59:27 +00:00

custom-background.php

callback is not a valid type in PHP, PSR-5, or phpDocumentor. callable should be used instead.

2015-09-25 23:58:25 +00:00

custom-header.php

Accessibility: add missing alt attributes to a gaggle of <img>s.

2015-11-07 16:12:27 +00:00

customize.php

Customize: Ignore invalid customization sessions.

2017-05-16 12:17:32 +00:00

edit-comments.php

Add translator comments for strings in wp-admin/edit-comments.php.

2015-11-06 00:23:25 +00:00

edit-form-advanced.php

Revert [34917] until the broken test is fixed.

2015-10-08 01:04:25 +00:00

edit-form-comment.php

Bump the "Status" H3 heading to H2 on the Edit Comment screen for better accessibility.

2015-10-14 17:44:24 +00:00

edit-link-form.php

Bump H3 headings to H2 on the legacy Link Manager screen for better accessibility.

2015-10-14 17:32:24 +00:00

edit-tag-form.php

Taxonomy/Users: Provide a fallback for incorrect HTTP referrers.

2017-09-19 11:13:42 +00:00

edit-tags.php

After [34891], rename new post type and taxonomy label keys to match the default strings.

2015-10-23 16:48:25 +00:00

edit.php

After [34891], rename new post type and taxonomy label keys to match the default strings.

2015-10-23 16:48:25 +00:00

export.php

Export: add missing labels and improvement accessibility of the Export screen.

2015-10-21 03:57:24 +00:00

freedoms.php

About: Sync tagline from about page with credits and freedoms.

2015-12-07 16:59:27 +00:00

import.php

Proper heading for admin screens.

2015-06-27 15:41:25 +00:00

index.php

Replace some hyphens with —s in admin help tabs.

2015-08-19 04:53:25 +00:00

install-helper.php

Docs: Add missing descriptions for the $wpdb global in DocBlocks all the places.

2015-10-14 23:44:25 +00:00

install.php

Install/Upgrade: Keep indexing bots away until a site is ready to be seen.

2015-12-08 22:02:27 +00:00

link-add.php

…

link-manager.php

List Tables/WP_Screen: in WP_Screen, add methods to store, retrieve, and render screen reader text, primarily used by list table screens.

2015-10-07 01:28:25 +00:00

link-parse-opml.php

Add @global annotations for wp-admin/*.

2015-05-28 21:41:30 +00:00

link.php

…

load-scripts.php

Create a new file, wp-admin/includes/noop.php, which loads all of the noop functions for load-script|styles.php and is only loaded by those files. DRYs in the process.

2015-09-11 05:04:23 +00:00

load-styles.php

Create a new file, wp-admin/includes/noop.php, which loads all of the noop functions for load-script|styles.php and is only loaded by those files. DRYs in the process.

2015-09-11 05:04:23 +00:00

media-new.php

media-new.php, when using the browser uploader, if the result of uploading is a WP_Error - wp_die() with the error, instead of redirecting with a generic error.

2015-09-10 17:18:24 +00:00

media-upload.php

Provide more helful feedback than just "Cheatin' uh?" for permission errors in wp-admin/media-upload.php.

2015-09-02 16:21:21 +00:00

media.php

Use a less element-specific class name for links within page titles.

2015-07-03 16:42:24 +00:00

menu-header.php

Docs: Document declaration of the $submenu_file global in wp-admin/menu-header.php.

2015-10-01 01:48:25 +00:00

menu.php

Eliminate a db query when building the admin menu for non-privileged users.

2015-11-18 21:34:26 +00:00

moderation.php

…

ms-admin.php

…

ms-delete-site.php

Trim trailing space from string in site delete confirmation

2015-07-01 16:31:25 +00:00

ms-edit.php

…

ms-options.php

…

ms-sites.php

…

ms-themes.php

…

ms-upgrade-network.php

…

ms-users.php

…

my-sites.php

My Sites: Make "Create a New Site" link consistent with other "Add New" links.

2015-10-09 03:50:24 +00:00

nav-menus.php

Customizer: Use correct context and translator comments for menu location strings.

2015-11-20 17:46:25 +00:00

network.php

Network Setup: don't use <code> in translation strings in wp-admin/network files.

2015-09-18 18:18:27 +00:00

options-discussion.php

Don't force comment pagination.

2015-10-21 16:26:42 +00:00

options-general.php

Revert [35336] and [35337].

2015-11-18 20:30:25 +00:00

options-head.php

…

options-media.php

Remove <code> tag from translatable string in wp-admin/options-media.php.

2015-11-06 00:28:25 +00:00

options-permalink.php

Permalinks: Use "Plain" instead of "None" for the ?p-###, which is still a valid permalink structure, just not a "pretty" one.

2015-11-10 22:19:27 +00:00

options-reading.php

Move ad hoc Options functions to wp-admin/includes/options.php:

2015-09-10 21:45:24 +00:00

options-writing.php

Revert [34778], continue using _site_option() for the current network.

2015-10-07 17:11:25 +00:00

options.php

Revert [35336] and [35337].

2015-11-18 20:30:25 +00:00

plugin-editor.php

General: Add missing URL-encoding and add extra hardening to plugin and template names when they're displayed in the admin area.

2017-09-19 12:13:31 +00:00

plugin-install.php

List Tables/WP_Screen: in WP_Screen, add methods to store, retrieve, and render screen reader text, primarily used by list table screens.

2015-10-07 01:28:25 +00:00

plugins.php

General: Add missing URL-encoding and add extra hardening to plugin and template names when they're displayed in the admin area.

2017-09-19 12:13:31 +00:00

post-new.php

Provide more helpful feedback than just "Cheatin' uh?" for permission errors in wp-admin/post-new.php.

2015-09-02 18:36:22 +00:00

post.php

Dashboard: use the create_posts cap on the post type object when determining if the Quick Press widget can be displayed.

2015-10-20 05:49:24 +00:00

press-this.php

Provide more helpful feedback than just "Cheatin' uh?" for permission errors in wp-admin/press-this.php.

2015-09-02 18:38:21 +00:00

profile.php

…

revision.php

Revisions: Change the capability needed to view revision diffs to edit_post.

2016-06-21 14:32:27 +00:00

setup-config.php

Install/Upgrade: Keep indexing bots away until a site is ready to be seen.

2015-12-08 22:02:27 +00:00

theme-editor.php

General: Add missing URL-encoding and add extra hardening to plugin and template names when they're displayed in the admin area.

2017-09-19 12:13:31 +00:00

theme-install.php

Add Nonce to updating wporg_favorites user meta field

2016-03-30 18:41:26 +00:00

themes.php

Customize: Return user to referring URL when leaving Customizer in absence of return query param.

2015-11-01 06:40:28 +00:00

tools.php

Bump H3 headings to H2 on Tools screen for better accessibility.

2015-08-31 03:32:21 +00:00

update-core.php

Updates: Translate plugin data on the Updates screen.

2017-01-11 11:41:31 +00:00

update.php

Plugins: Don't request all fields via plugins_api( 'plugin_information' ) for plugin installs and update checks.

2015-09-26 15:50:25 +00:00

upgrade-functions.php

…

upgrade.php

Install/Upgrade: Keep indexing bots away until a site is ready to be seen.

2015-12-08 22:02:27 +00:00

upload.php

List Tables/WP_Screen: in WP_Screen, add methods to store, retrieve, and render screen reader text, primarily used by list table screens.

2015-10-07 01:28:25 +00:00

user-edit.php

Taxonomy/Users: Provide a fallback for incorrect HTTP referrers.

2017-09-19 11:13:42 +00:00

user-new.php

Users: Allow to create users without sending an email to the new user.

2015-11-25 22:38:29 +00:00

users.php

Users: When determining whether to show the reassign content option during user delete, don't rely upon WP_Query as it doesn't return all forms of content wp_delete_user() operates on.

2015-12-27 02:17:21 +00:00

widgets.php

Add nonce for widget accessibility mode.

2017-01-11 01:45:31 +00:00